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DIRECT  EXAMNIATION 

Questions  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  You  are  Professor  Yochai  Benkler  of  Cambridge, 
Massachusetts? 

A .  I  am . 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Professor  Benkler,  good  morning. 

A.  Good  morning. 

Q.  I  want  to  start  off  by  getting  some  background  information 
on  you.  You  are  the  Berkman  Professor  for  Entrepreneurial  Legal 
Studies  at  the  Harvard  Law  School? 

A.  Yes,  I  am. 

Q.  You  are  also  the  faculty  co-director  for  the  Berkman  Center 
for  Internet  &  Society  at  the  Harvard  Law  School? 

A.  I  am. 

Q.  In  2011,  you  authored  an  article  entitled:  "A  Free 
Irresponsible  Press,  WikiLeaks  and  the  Battle  Over  to  the  Soul  of  the 
Networked  Fourth  Estate." 

A.  I  did. 

Q.  Sorry  about  butchering  that  title  for  you. 

A.  It's  much  too  long,  I  assume. 

Q.  Now,  this  article  was  subsequently  published  in  the  Harvard 

Civil  Rights,  Civil  Liberties  Law  Review;  is  that  correct? 
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A.  It  was. 

Q.  And  as  part  of  that  article,  did  you  conduct  research  on 
WikiLeaks? 

A.  I  did. 

Q.  Did  you  also  conduct  research  on  the  reaction  to  the 
disclosures  in  this  case? 

A.  I  did. 

Q.  And  during  your  research  for  your  article,  did  you  review 
any  documentation  concerning  the  WikiLeaks  media  organization? 

A.  Yes,  I  did. 

Q.  And  was  one  of  these  documents  the  Army's 
counterintelligence  report  on  WikiLeaks? 

A.  It  was  the  version  that  was  then  publicly  available. 

Q.  Professor  Benkler,  are  you  prepared  today  to  tell  us  about 

the  historical  background  of  the  WikiLeaks  media  organization,  the 
nature  of  the  reaction  to  the  WikiLeaks  publication  and  your  review 
of  the  Army  counterintelligence  report? 

A.  I  am. 

Q.  Let's  begin  by  learning  a  little  bit  more  about  you  and 
your  background. 

You  obtained  your  bachelor's  of  law  degree  from  Tel 
Aviv  University? 

A.  I  did. 
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Q.  And  when  did  you  obtain  that  degree? 

A.  1991. 

Q.  You  then  obtained  your  juris  doctorate  degree  from  Harvard 
Law  School? 

A.  I  did. 

Q.  And  when  did  you  attain  your  degree  from  Harvard? 

A.  1994. 

Q.  Afterwards  you  were  a  law  clerk  to  Justice  Stephen  Breyer 
of  the  United  States  Supreme  Court? 

A.  I  was. 

Q.  When  did  you  clerk  for  Justice  Breyer? 

A.  The  October  ' 95  term. 

Q.  You  then  became  an  assistant  and  subsequently  an  associate 
professor  of  law  at  the  New  York  University  School  of  Law? 

A.  I  was. 

Q.  And  how  long  did  you  teach  there? 

A.  About  7  years. 

Q.  What  subjects  did  you  teach  at  NYU? 

A.  I  taught  communications  law,  internet  law  and  policy, 
intellectual  property  as  well  as  the  first  year  property  course. 

Q.  You  were  then  subsequently  a  professor  of  law  at  Yale? 

A.  I  was. 

Q.  And  how  long  were  you  professor  of  law  at  Yale? 


10212 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


o 


o 


A.  Four  years. 

Q.  What  did  you  teach  at  Yale? 

A.  Roughly  the  same  subjects,  minus  property  plus  intellectual 


property. 

Q.  When  did  you  become  a  member  of  the  Harvard  Law  faculty? 

A.  In  2007. 

Q.  What  subjects  do  you  teach  at  Harvard? 

A.  The  same  subjects  I've  been  teaching  for  17  years,  the 
whole  range  of  communications  law,  intellectual  property,  selective 
problems  and  internet  law  and  policy,  et  cetera,  and  property. 

Q.  How  many  books  have  you  published? 

A.  Three. 

Q.  How  many  articles  have  you  published? 

A.  About  50. 

Q.  Your  articles,  they've  appeared  in  prominent  journals? 

A.  Yes.  The  Yale  Journal ,  The  Harvard  Journal  of  Law 
Technology ,  Harvard  Civil  Liberties  Journal ,  NYU  Law  Review,  et 
cetera. 

Q.  I  imagine  your  articles  have  been  cited  often? 

A.  I  hope  so. 

Q.  And  are  you  aware  of  how  many  times  your  articles  have  been 
cited? 


10213 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


o 


9 


A.  It's  hard  to  tell.  Google  Scholar  has  something  over  4,000 
cites  for  my  book  Wealth  Of  Networks;  about  1600  cites  for  Coase's 
Penguin,  which  is  one  article,  so  some  number  of  thousands  of  times 
in  law  reviews  and  elsewhere. 

Q.  And  my  understanding  of  citing  basically  that  would  be  kind 
of  peer  review  where  people  would  cite  you  for  a  proposition? 

A.  Yes,  yes.  There  was  a  study  in  2012  that  found  two  of  my 
articles  as  —  one  from  '99,  one  from  2002,  as  the  second  most  cited 
law  article  in  any  subject  on  law  for  that  year. 

Apparently  a  piece  of  mine  was  published  last  year  on 
the  political  blogosphere  is  going  to  be  identified  as  the  best 
article  on  Political  Science  and  Technology  published  in  2012.  Those 
are  the  kind  of  peer  assessments  we  get. 

Q.  You  also  received  a  $100,000  award  from  the  Ford  Foundation 
for  your  work  in  the  field  of  internet  freedom  and  access;  is  that 
correct? 

A.  Yes,  I  did. 

Q.  And  what  was  that  award  for? 

A.  This  was  on  the  occasion  of  Ford  Foundation's  75th 
anniversary.  They  recognized  several  people  they  described  as 
visionaries  for  understanding  certain  domains  and  seeing  how  they 
change  the  future  and  this  was  for  my  work  on  internet  and  open 
access . 
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Q.  You  also  speak  at  conferences? 

A.  I  do. 

Q.  And  how  frequently? 

A.  Probably  about  once  a  month,  maybe  10  times  a  year. 

Q.  And  in  general,  what  are  the  topics  that  you  speak  about? 

A.  The  range  of  my  research,  ranging  from  basic  spectrum 

policy,  wireless  policy  all  the  way  to  network  society,  network 
innovation.  But  also,  obviously,  networked  forth  estate,  the  future 
of  journalism. 

Q.  You  received  a  Lifetime  Achievement  Award  from  Oxford? 

A.  I  did. 

Q.  When  was  this? 

A.  In  2012. 

Q.  When  did  you  become  the  faculty  co-director  for  the  Berkman 
Center  for  Internet  &  Society  at  Harvard? 

A.  I  was  asked  to  become  faculty  co-director  as  soon  as  I 
joined  the  faculty  in  2007. 

Q.  Can  you  tell  us  what  the  Berkman  Center's  mission  is? 

A.  The  Berkman  Center  is  one  of  the  premier  centers.  It's  a 

university-wide  center.  It's  a  center  intended  to  provide  for  cross- 
disciplinary  research  on  internet  and  the  society,  the  effects  on  the 
internet  and  society  and  vice  versa. 

Q.  When  was  the  Berkman  Center  established? 
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A.  Formally  in  '98  with  a  gift  from  the  Berkman  Foundation. 

It  has  its  roots  in  the  center  founded  by  Professors  Nesson  and 
Zittrain  in  '96  at  the  law  school  and  then  it  became  university-wide 
center  in  2008,  soon  after  I  arrived. 

Q.  And  what  sort  of  issues  does  the  Berkman  Center  research? 

A.  It  really  researches  a  broad  range  of  issues  that  are 
pertinent  to  the  net.  We  have  probably  the  most  authoritative 
technical  study  of  censorship  and  filtering,  technical  analysis  of 
censorship  and  filtering  throughout  the  world.  We  have  a  group 
working  on  digital  media,  and  youth,  that  is  one  of  the  leading 
centers  for  studying  the  effects  on  youth,  to  a  wide  range  of  things 
I  do  with  my  own  groups.  The  Federal  Communications  Commission  asked 
me  to  do  a  review  of  broadband  policy  when  they  were  preparing  their 
national  broadband  plan  that  resulted  in  a  330-page  review.  Work  on 
wireless  spectrum  policy  that  resulted  in  my  being  asked  to  join  the 
Spectrum  Task  Force  report  of  the  President's  Council  of  Advisers  on 
Science  and  Technology  on  Spectrum.  Work  on  distributing  innovation 
and  reorganization  of  information  production  and  the  network,  which 
is  probably  why  I'm  on  the  World  Bank's  Knowledge  Advisory 
Commission.  And  as  well  as  obviously  work  on  the  network  public 
sphere  and  collaboration,  we  have  a  big  project  with  Central  Pacific 
Media  at  MIT  trying  to  map  and  study  generally  the  networked  public 
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sphere  debate  on  the  net  but  also  specifically  the  various  models  of 
journalism  and  interactions. 

Q.  And  can  you  tell  the  Court  about  the  World  Bank?  You 
mentioned  that  you  are  on  the  World  Bank  Organization? 

A.  So  this  is  —  this  is  merely  an  advisory  commission,  as  the 
bank  is  trying  to  understand  both  its  own  dynamics  of  research  and 
innovation  internally  and  respond  to  changes  in  innovation  and 
research  throughout  the  world. 

Q.  And  how  does  the  Berkman  Center  advance  its  research 
mission? 

A.  We  have  a  large  number  of  affiliate  and  faculty  from  both 
the  university  itself  and  other  institutions.  We  have  several  dozen 
fellows  who  are  research  fellows  doing  work  in  collaboration  with 
each  other  or  individually.  We  have  a  large  number  of  research  staff 
and  research  assistants  and  research  platform  both  technical  and  in 
the  social  sciences.  And  we  have  a  series  of  seminars  and  workshops 
and  research  teams  that  apply  these  diverse  methods  to  various 
questions . 

Q.  During  the  time  that  you  have  been  there,  have  you  ever 
conducted  any  research  and  writing  on  what  is  called  the  Networked 
Fourth  Estate? 

A.  Yes,  absolutely.  I've  been  working  for  generally  on  the 
influence  of  the  internet  on  democracy  essentially  since  the  mid  90s. 
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My  2006  book,  "Wealth  of  Network,  How  Social  Production  Transforms 
Markets  and  Freedom, "  was  in  general  about  the  change  in  models  of 
information  production.  I  had  two  chapters  essentially  dedicated  to 
the  question  of  changing  in  politics  and  changing  in  the  public 
sphere . 

Part  of  that  was  understanding  how  we  come  to  know  things 
in  the  public  sphere  and  essentially  what  is  the  future  of  journalism 
as  it  were.  I  then  began  to  focus  for  explicitly  after  2009  on 
network  journalism  and  the  effects  of  networking  journalism. 

Q.  And  the  book  that  you  mentioned,  "The  Wealth  of  the 
Networks,  How  Social  Production  Transforms  Markets  and  Freedom,"  did 
that  book  receive  any  recognition? 

A.  Yes,  it  did.  It  received  a  couple  of  —  well,  several 
awards . 

Q.  Can  you  tell  the  court  about  some  of  those  awards? 

A.  It  was  —  it  was  designated  the  best  book  on  science, 

technology  and  politics  published  in  three  years  by  the  American 
Political  Science  Association.  It  received  a  Distinguished  Book 
Award  from  the  American  Sociological  Association  about  sociology  and 
technology  and  a  number  of  other  things  I  mentioned,  in 
communications  business. 

Q.  Now,  this  book,  has  it  been  translated,  my  understanding 
has  it  been  translated  in  at  least  four  different  languages? 
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A.  It's  been  translated  into  the  major  romance  languages, 
Spanish,  Italian  and  French,  Polish,  Macedonian,  yes. 

Q.  And  you  mentioned  that  you  received  an  award  from  the 
American  Political  Science  Association.  What  is  that  association? 

A.  That's  the  premiere  professional  association  of  academic 
political  scientists. 

Q.  And  then  I  think  the  other  one  was  the  American 
Sociological  Association? 

A.  Similarly,  that's  the  premiere  association  of  professional 
academic  sociologists. 

Q.  Did  there  come  a  time  when  you  began  to  specifically  focus 
on  the  Networked  Fourth  Estate? 

A.  Yes,  early  2009  there  came  a  substantial  new  degree  of 
interest  in  the  influence  of  the  network  on  journalism.  It's  a  very 
similar  phenomenon  to  what  we  saw  in  software  in  the  late  90 's,  what 
we  saw  in  music  in  the  early  2000s,  what  we  saw  in  video  in  the  mid 
2000s.  Traditional  journalism  began  to  take  notice.  There  was  a 
Federal  Trade  Commission  hearing  that  I  was  invited  to  talk  to  about 
that  question  of  the  future  of  journalism  that  was  trying  to 
understand  whether  there  were  policy  interventions.  So  this  became  a 
time  when  it  was  publicly  significant  or  I  was  invited  to  come  talk 
about  it  and  I  began  to  spend  more  time  specifically  on  the  model  of 
journalism  and  its  interaction  with  the  network. 
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Q.  Can  you  give  a  —  a  general,  I  guess,  description  for  what 
is  the  Networked  Fourth  Estate? 

A.  The  Networked  Fourth  Estate  is  the  set  of  practices, 
organizing  models,  technologies,  that  together  come  to  fill  the  role 
that  in  the  20th  Century  we  associated  with  the  free  press. 
Essentially  the  cluster  —  if  we  think  of  the  Fourth  Estate  as  the 
way  in  which  the  press  provides  a  public  check  on  the  three  classic 
branches  of  government.  The  Networked  Fourth  Estate  is  essentially 
the  cluster  of  practices,  technologies  and  organizations  that  fill 
that  role  in  the  21st  model  of  network  information  production. 

Q.  And  how  do  issues  involving  the  Networked  Fourth  Estate  fit 
into  the  Berkman  Center? 

A.  Oh,  they're  absolutely  central.  We  study,  perhaps  more 
importantly  than  anything  else,  the  ways  in  which  the  internet 
affects  democracy  and  the  basic  question  of  how  the  media  and  the 
Fourth  Estate  relates  to  the  network  is  absolutely  central.  We 
actually  have  just  now  gotten  funding  for  a  major  portion  in  this 
area  in  collaboration  with  MIT's  civic  media  lab.  So  it's  absolutely 
central  to  the  Berkman  Center's  mission. 

Q.  Professor  Benkler,  let's  discuss  the  article  that  you  wrote 
on  the  network  of  the  fourth  estate,  specifically  dealing  also  with 
WikiLeaks  in  more  detail.  Okay? 

A.  Yes. 
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Q.  I'm  showing  you  what  has  been  marked  as  Defense  Exhibit 
Golf  for  Golf-Golf  Identification  [handing  DE  GG  for  ID  to  the 
witness] .  Do  you  recognize  that? 

A.  I  do. 

Q.  And  what  is  that? 

A.  That  is  the  article  that  I  published  in  the  Harvard  Civil 
Liberties  Review. 

Q.  When  was  that  article  published? 

A.  Mid  2011. 


Q.  When  did  you  begin  your  research  for  this  article? 

A.  In  April  of  2010,  right  after  the  release  of  the  helicopter 

video. 

Q.  The  Apache  video  charged  in  this  case? 

A.  Yes. 

Q.  When  you  began  your  research,  what  did  you  set  out  to 
investigate? 

A.  Well,  I  was  intrigued.  When  this  came  out  it  was  clear 
that  Reuters  had  been  trying  to  get  access  to  the  footage  for  2  years 
in  traditional  means.  This  seemed  like  an  interesting  connection 
between  network  models  and  traditional  media. 

It  was  a  success  where  the  traditional  model,  one  of  its 
most  famous  practitioners,  writers,  was  unable  to  get  the  information 
in  terms  of  retrieving  the  material.  And  it  was  released  by  the 
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National  Press  Club  which  provided  a  very  interesting  bridge  between 
new  media  and  old  media. 

So  the  combination  of  these  things  intrigued  me  and  I 
thought  it  would  be  a  very  good  case  study  for  how  new  network  models 
are  beginning  to  interact  more  formally  with  the  traditional  models, 
so  that's  when  I  started  working  on  this. 

Q.  And  you  said  that  it  was  released,  the  Apache  video  was 
released  within  the  National  Press  Club? 

A.  Yes. 

Q.  Can  you  talk  about  that  just  for  a  second? 

A.  So - 

Q.  Like  what  is  the  National  Press  Club? 

A.  It's  a  location  and  organization  in  Washington,  D.C.  that 
in  many  senses  represents  the  core  of  the  establishment  of 
traditional  journalism,  so  it  was  that  incongruity  as  it  were  between 
a  completely  distributed  model  and  the  core  representation  location 
of  traditional  media  that  I  found  so  interesting. 

Q.  And  can  you  tell  us  about  the  research  that  you  conducted 
for  this  article? 

A.  You  mean  what  did  I  do  in  terms  of  research? 

Q.  Correct. 

A.  This  is  primarily  reading  a  lot  of  news  reports,  over  a 
thousand;  online  research  to  see  what  was  written  online;  historical 
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views;  historical  searches  that  are  time  limited  in  order  to  see  what 
prior  things  have  been  written;  internet  archive  views  of  the 
WikiLeaks  site  itself  to  see  if  the  message  had  significantly  changed 
over  time;  looks  at  the  history  of  Wikipedia  articles  to  see  how  it 
was  understood  on  Wikipedia  over  time;  those  kinds  of  materials. 

Q.  These  types  of  materials  and  sources,  are  they  typically 
relied  upon  by  academic  professionals  in  your  field? 

A.  It's  one  of  the  methods  we  use.  I  also  use  other  methods 
as  well,  but  certainly  this  sort  of  first  draft  of  history,  looking 
at  a  lot  of  publicly  available  written  materials  is  one  important 
method  that  we  use  when  we  try  to  understand  broad  trends, 
particularly  when  we  try  to  understand  the  qualitative  substance 
rather  than  providing  merely  quantitative  thinner  representations, 
yes . 

Q.  How  long  did  you  spend  researching  for  this  article? 

A.  About  8  months  until  the  very  last  version  in  March  2011, 
at  the  end  of  the  editorial  process,  so  about  8  months.  I  kept 
researching  obviously  because,  though  I  didn't  expect  it,  when  I 
started  working,  it  became  a  much  more  live  subject  by  the  time  I  had 
finished  working  on  it. 

Q.  And  did  you  conduct  any  research  to  learn  about  the 
WikiLeaks  journalistic  organization? 

A.  Yes. 
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Q.  What  did  you  review  to  learn  about  WikiLeaks? 

A.  Roughly  the  same  kinds  of  materials. 

Q.  And  can  you  describe  the,  basically  in  broad  brush,  the 

type  of  materials  that  you  considered  to  learn  about  WikiLeaks? 

A.  Again,  a  wide  range  of  --  a  wide  range  of  news  articles  to 
see  how  it  was  portrayed,  a  wide  range  of  online  materials.  I'd  say 
the  one  additional  piece  was  when  I  published  the  very  first  draft  of 
the  article  or  didn't  publish  —  when  I  put  it  up  online,  which  I 
often  do  in  order  to  get  commentary  from  people  so  I  can  improve  it. 

I  got  an  e-mail  from  Julian  Assange  with  a  variety  of 
annotations  where  I  was  right,  where  I  was  wrong,  where  there  was 
more  material.  I  used  that  much  the  way  that  I  would  use  information 
from  an  interviewee  in  a  more  interview  based  model  of  research.  So 
to  some  extent,  as  the  footnotes  in  the  article  show,  I  describe  it 
as  Assange  says  so-and-so  in  this  and  this  particular  portions  of  the 
annotations.  In  some  places  it  sent  me  back  to  do  more  research 
where  he  raised  ambiguities  or  disagreed  with  other  sources, 
characterizations  of  the  events  and  I  just  used  it  as  an  impulse  to 
go  into  more  research  of  the  same  kind. 

Q.  And  are  these  sources  typically  relied  upon  by  academic 
professionals  in  your  field? 

A.  Yes,  I  think  they  are. 
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Q.  Based  upon  your  research,  did  you  reach  any  conclusions  as 
to  how  WikiLeaks  fit  into  the  Networked  Fourth  Estate? 

A.  Yes,  I  did. 

Q.  Did  you  also  study  and  learn  about  the  historical 
background  of  WikiLeaks,  how  it  was  viewed  at  one  particular  time  and 
how  it  is  currently  being  depicted? 

A.  Yes,  I  did. 

Q.  And  based  upon  your  research  study  and  writing  on  this 
topic,  did  you  ultimately  reach  any  conclusions  regarding  WikiLeaks 
and  how  it  fit  within  the  Networked  Fourth  Estate? 

A.  Yes,  I  did  reach  that  conclusion.  The  article  was  —  this 
article  has  been,  as  best  I  can  tell,  the  most  widely  cited  academic 
article  on  WikiLeaks,  at  least  according  to  Google  Scholar. 

Q.  In  comparison  to  other  articles,  how  many  more  times  has 
this  been  cited  just  in  double  or  triple? 

A.  So  this  article,  again,  based  on  Google  Scholar  has  been 
cited  about  twice  as  often  as  the  next  most  cited  source  which  is  Lee 
Harding  book  "Inside  WikiLeaks"  which  was  written  by  the  true 
Guardian  reporters  who  work  on  the  publication  of  these  materials. 

And  this  article  has  been  cited  almost  twice  as  often. 

Q.  And,  again,  when  people  cite  your  article,  is  that  how  peer 
review  is  done  in  your  field? 
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A.  It's  certainly  considered  a  standard  measure  of  influence 
of  an  article,  the  degree  to  which  people  say,  this  is  what  I  rely  on 
for  the  best  assessment  of  this  or  that  issue,  yes. 

CDC [MR .  COOMBS]:  Your  Honor,  at  this  time  the  defense  would 
request  the  Court  recognize  Professor  Benkler  as  an  expert  in  the 
subject  matter  of  the  Networked  Fourth  Estate.  We  intend  to  use  that 
expertise  then  to  specifically  testify  about  how  WikiLeaks  fits 
within  the  Networked  Fourth  Estate. 

ATC [CPT  MORROW]:  One  moment.  Your  Honor. 

Your  Honor,  I'd  like  to  examine  briefly. 

MJ:  Go  ahead. 

VOIR  DIRE 

Questions  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  I  want  to  start  by  asking  you  about  the  Networked  Fourth 

Estate.  Is  that  a  term  that  you  coined? 

A.  Yes,  it  is. 

Q.  Can  you  —  when  did  you  coin  that  term? 

A.  Possibly  in  this  article. 

Q.  So  this  is  a  —  prior  to  summer  of  2011,  when  this  article 
was  formally  published  in  the  Harvard  Civil  Liberties  Review,  this 
term  had  not  been  used  by  other  people  in  your  field? 

A.  The  term  had  taken  hold  since  the  publication  of  my  2006 
book  was  broader,  the  network  public  sphere.  And  that  has  become 
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more  or  less  a  term-of-art  in  terms  of  trying  to  understand  the 
structure  of  the  network  and  democracy.  What  I  did  here  was  to  try 
to  narrow  the  specifics  of  focus  and  that's  largely  become,  I'd  say, 
a  fairly  normal  and  standard  way  of  talking  about  it  now. 

Q.  And  the  Networked  Fourth  Estate  or  the  Fourth  Estate  refers 
to  journalism  in  general? 

A.  Mostly  it  refers  to  journalism  when  we're  talking  about  its 
role  in  the  construction  of  democracy,  more  on  the  watchdog  function 
specifically  around  the  more  broadly  journalism. 

Q.  When  you  put  network  in  front  of  that,  what  networks  are 
you  talking  about? 

A.  I'm  talking  particularly  about  the  cluster  of 
technological,  organizational  and  practical  —  practice-based  changes 
that  have  been  characterized  by  the  shift  to  the  ubiquitous 
computation,  ubiquitous  communication,  ubiquitous  sensing  and 
ubiquitous  storage,  which  is  really  the  set  of  changes  that  I've  been 
writing  about  since  the  mid  90 's.  So  there's  a  cluster  of  typical, 
organizational  changes  that  we  have  seen  rereleased  since  software  in 
the  mid  '90s  that  are  combined  with  —  that  are  primarily  related  to 
the  rise  of  the  internet  and  have  appeared  and  reappeared  in  multiple 
industries  over  this  time  that  have  been  affected  in  this  form. 

Q.  How  does  the  —  when  you  —  When  we  think  about  the  network 
sometimes  we  think  about  sort  of  exclusively  the  internet.  How  does 
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the  —  when  you  describe  the  Networked  Fourth  Estate,  are  you 
referring  primarily  to  the  internet  or  are  you  referring  primarily 
how  the  internet  interacts  with  other  traditional  forms  or  older 
forms  of  information  distribution?  How  does  that  work? 

A.  So  essentially  what  happened  with  the  --  what  happened  with 
the  introduction  of  ubiquitous  computing  is  that  the  core  physical 
resource  that  we  need  to  be  productive  in  this  set  of  domains  became 
widely  distributed  in  population.  The  core  storage  facilities,  the 
core  creative  human  resources,  the  creativity,  the  insight  became 
distributed  throughout  the  population.  And  so  to  think  of  it  purely 
in  terms  of  the  internet  as  I  think  too  narrow,  that's  a  lot  of  what 
I've  been  trying  to  explain  in  the  last  17  years.  It's  much  more  a 
combination  not  only  of  the  technical  side  of  the  internet  but  also 
the  organizational  adaptation. 

One  of  the  things  that's  happened  is  people  realize  that 
you  can't  have  all  the  smartest  people  and  all  the  resources  working 
in  the  same  organization.  So  we  have  seen  a  much  greater 
distribution  in  networks  that  even  though  they  use  the  internet, 
what's  important  about  the  network  structure  is  actually  permissions, 
who's  allowed  to  work  on  what  resource  or  assignments  of  work 
assignments  and  you  get  essentially  these  organizational  networks 
that  transcend  traditional  boundaries,  these  resource  and  permission 
networks  that  transcends  the  boundaries  of  traditional  properties 
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layered  over  a  technological  network  that  actually  has  the  materials. 
It's  really  this  —  that's  why  I  resist  a  little  bit  is  describing  it 
just  the  internet. 

Q.  Right. 

A.  I  think  it's  more  layered  than  that. 

Q.  So  really  it's  more  about  the  —  that  was  a  lot  of  —  I  was 
trying  to  follow  along.  But  really  it's  more  —  the  network  of  the 
Fourth  Estate  is  really  about  really  how  information  is,  what,  shared 
among  - 

A.  It's  how  it's  produced.  It's  how  it's  shared.  Let  me  give 
you  an  example  so  it's  completely  irrelevant  so  it  doesn't  influence 
the  course  of  our  material  here  from  research  that  we're  conducting 
now.  Maybe  you  remember  about  a  year  and  a  half  ago  there  was  a 
major  Wikipedia  shutdown  for  a  day.  There  was  a  major  protest  over  a 
statute  that  was  introduced,  a  bill  that  was  introduced  in  Congress. 

One  of  the  things  that  happened  there  as  we  have  been 
studying  now  is  that  who  was  producing  the  information  was  very 
different  from  the  traditional  model.  You  had  a  few  commercial  sites 
like  Tech  Dirt  that  was  incredibly  important  in  doing  the  initial 
investigating.  You  had  individual  blogs.  There  is  a  week  in  which 
one  of  the  most  visible  sites  is  one  law  professor  writing  their  own 
blog  doing  a  core  analysis  of  a  new  bill.  There  is  a  little  bit  of 
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traditional  media,  but  there's  a  non-profit  organization  that  writes 
together  with  it . 

So  it's  this  fact  that  you  have  very  different  low  side  of 
information  production  throughout  the  network,  each  doing  what 
they're  particularly  good  at  and  then  feeding  into  what  becomes  the 
single  understanding  that  we  have  that's  really  what  I'm  talking 
about.  The  internet  facilitates  it,  distributes  the  computation 
facilitates  it,  but  it's  really  this  distribution  of  a  sense  of  who 
does  what  and  who  is  accredited  to  do  what  and  if  we  used  to  once  be 
able  to  turn  on  the  TV  and  there  was  Walter  Cronkite  and  that  was  the 
way  that  it  was.  It  simply  can't  work  that  way  anymore.  That's 
really  what  I'm  talking  about. 

Q.  Have  you  been  qualified  as  an  expert  before? 

A.  No,  I  haven't. 

Q.  And  so  you  haven't  been  qualified  as  an  expert  in  Networked 
Fourth  Estate? 

A.  When  you  say  qualified,  I  assume  you  meant  in  a  courtroom 

Q.  In  a  courtroom. 

A.  -  in  this  context? 

Q.  Yes. 

A.  Yes.  No.  Other  people  would  qualify  me  as  an  expert  but 
not  in  a  courtroom. 
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Q.  That's  what  I  mean.  To  your  knowledge,  has  anyone  ever 
been  qualified  as  an  expert  in  a  Networked  Fourth  Estate? 

A.  I  have  no  idea. 

Q.  In  a  courtroom? 

A.  I  have  no  idea. 

ATC [CPT  MORROW]:  Your  Honor,  this  is  a  distinguished  academic 

and  obviously  very  smart  man,  but  the  government's  position  is  that 
the  scope  of  the  Networked  Fourth  Estate  or  at  least  how  he's 
described  it  now  is  somewhat  unrelated  to  the  --  or  disassociated 
from  his  opinions  about  WikiLeaks  as  a,  whether  or  not  they're  a 
journalist  organization. 

MJ:  I'm  not  quite  sure  I  understand  that. 

ATC [CPT  MORROW]:  Well,  I'm  not  quite  sure  I  understand  the 

Networked  Fourth  Estate,  but  - 

MJ:  Am  I  understanding  you  correctly  in  saying  that  you're 

basically  looking  at,  you  know,  in  the  last  century  traditional  news 
media  and  the  way  people  got  news  was  through  newspapers.  Before 
that,  I  don't  know,  a  telegram  or  something  like  that.  As  technology 
evolved,  now  you're  getting  more  people  on  the  internet  that  are 
sharing  things? 

WIT:  That's  at  the  core  of  it. 

MJ:  But  you're  studying  the  evolution  of  how  people  get  news  or 

develop  news? 
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1  WIT:  Yes.  Yes. 

2  MJ:  I  understand  your  objections  to  potential  opinions  that  may 

3  be  given  but  the  scope  of  the  expertise  in  developing  new  technology, 

4  or  new  ways  of  communicating,  if  you  will.  What's  the  government's 

5  objection  to  it? 

6  ATC [CPT  MORROW]:  We  have  no  objection  to  rendering  any 

7  opinion  in  that  sense. 

8  MJ:  Well,  I  assume.  Professor  Benkler  is  going  to  be  testifying 

9  about  how  WikiLeaks  fits  into  news  Networked  Fourth  Estate. 

10  ATC [CPT  MORROW]:  That's  correct.  I  guess  you  can  see  how  the 

11  testimony  goes  and  we  can  raise  additional  objections  to  relevance  as 

12  they  come. 

13  MJ:  All  right.  I'll  go  ahead  and  accept  him  as  an  expert  in 

14  that  area.  But  I  will  be  ensuring  that  the  testimony  that's  given  is 

15  relevant. 

16  Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

17  Q.  Professor  Benkler,  let's  start  off  by  talking  about  your 

18  research  on  WikiLeaks.  Okay? 

19  A.  Yes. 

20  Q.  How  was  WikiLeaks  formed? 

21  A.  As  best  we  know  from  the  available  documents  on  the  site 

22  itself,  it  describes  itself  as  a  collection  of  Chinese  activists. 
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1  mathematicians,  journalists  from  several  other  countries  who  came 

2  together  in  order  to  create  a  platform  for  providing  transparency. 

3  Q.  When  did  WikiLeaks  become  an  online  presence? 

4  A.  WikiLeaks  began  —  WikiLeaks  the  domain  name  is  registered 

5  in  late  2006.  The  first  sample  document  was  placed  online  in 

6  December  of  2006,  with  the  supposedly  secret  Somali  court  order.  But 

7  that's  more  rumor  and  early  moves.  The  first  real  instance  of  a 

8  genuine  leak  is  in  August  of  2007,  with  the  publication  of  an 

9  independent  —  of  an  independent  report  on  corruption  in  the 

10  government  of  Daniel  arap  Moi  in  Kenya. 

11  And  then  later  on  —  later  in  2007,  with  the  publication  of 

12  the  Camp  Delta  operating  procedures  in  November  of  2007. 

13  Q.  Based  upon  your  research,  what  type  of  organization  is 

14  WikiLeaks? 

15  MJ:  At  what  time  period? 

16  Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

17  Q.  At  any  time  period. 

18  A.  WikiLeaks  is  a - 

19  ATC [CPT  MORROW]:  Objection,  Your  Honor. 

20  MJ:  Yes. 

21  ATC [CPT  MORROW]:  We  would  ask  that  the  scope  of  his  testimony 

22  be  limited  to  the  time  period  from  2007  to  March  2010. 
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MJ:  Is  the  government  going  to  go  forward  in  cross-examination 

on  any  future  time  period? 

ATC [CPT  MORROW]:  Future? 

MJ:  Future  time  period  with  WikiLeaks? 

ATC [CPT  MORROW]:  It's  limited  to  that. 

MJ:  What  is  the  relevance  of  what  it  is  after  the  charged 

offenses  and  publications? 

CDC [MR.  COOMBS]:  I  think  the  relevance  is  because  the 

government's  theory  in  this  case  is  by  giving  information  to 
WikiLeaks,  PFC  Manning  gave  information  to  the  enemy.  They  charged 
that  after  the  March  of  2010  timeframe.  They've  also  charged  him 
with  wanton  disclosure  of  classified  information  - 

MJ:  Getting  rid  of  the  March  timeframe.  With  respect  to 

relevance  of  WikiLeaks  through  the  period  of  publication  of  whatever 
the  government  is  alleging  that  PFC  Manning  gave,  what  is  the 
relevance  of  what  they're  like  after  that? 

CDC [MR.  COOMBS]:  The  Defense's  position  is  the  relevance 

after  that  time  period  goes  into  really  how  the  government  has 
charged  the  case  or  how  they're  trying  to  portray  WikiLeaks  as  an 
organization  that  would  provide  information  to  the  enemy  or  somehow 
not  a  legitimate  journalistic  organization.  That  type  of  argument 
has  only  been  advanced  after  the  March  2010  time  period.  And 
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1  Professor  Benkler  will  testify  how  WikiLeaks  was  viewed  prior  to 

2  this. 

3  MJ:  I  understand  that.  I'm  just  looking  at  beyond  the 

4  publications  of  the  charged  documents  so,  for  example,  WikiLeaks  now, 

5  WikiLeaks  in  2012,  what's  the  relevance? 

6  CDC [MR.  COOMBS]:  Well,  again,  the  idea  of  WikiLeaks  as  being 

7  anything  but  a  legitimate  journalistic  organization  that  was 

8  advancing  transparency,  was  not  anti-American,  was  not  aiding  the 

9  enemy  in  any  way,  shape  or  form  or  designed  to  do  that,  was  not  an 

10  organization  that  the  enemy  went  to.  The  government  has  introduced 

11  evidence,  subsequent  to  March  of  2010,  where  they're  saying,  well, 

12  you  know,  Osama  Bin  Laden  asked  people  to  go  to  WikiLeaks  to  pull 

13  information.  That's  subsequent  to  March  2010. 

14  The  government's  whole  argument  seems  to  be  premised  on 

15  creating  WikiLeaks  as  a  bad  organization,  as  Julian  Assange  as  a  bad 

16  person.  That  whole  train  of  thought  is  created  really  after  March  of 

17  2010.  It's  created  by  big  government  and  how  they  reacted  to  the 

18  releases  in  this  case  and  how  they  reacted  —  and  Professor  Benkler 

19  will  testify  how  they  reacted  in  a  very  uneven-handed  manner  where 

20  you  have  other  organizations  like  the  New  York  Times,  like  The 

21  Guardian,  like  Der  Spiegel,  publishing  the  same  information  and  yet 

22  the  diatribe  coming  from  the  government  was  not  aimed  at  them,  it  was 

23  aimed  at  WikiLeaks. 
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So  the  government  in  their  case  has  introduced  evidence  as 
to  how  the  enemy  apparently  viewed  WikiLeaks  after  March  2010.  That 
even  when  you  look  at  that  evidence  and  the  Court  does,  you'll  see 
that  the  request  for  that  information  wasn't  because  of  the  enemy 
saying,  "Hey,  we  need  to  go  to  WikiLeaks  to  get  this."  When  you  look 
at  that  document  —  I  can  get  the  exact  Prosecution  Exhibit,  the 
individual  says,  due  to  the  government's  response,  and  I  believe  it's 
the  Secretary  of  Defense's  response,  claiming  that  WikiLeaks  is 
aiding  the  enemy,  we  need  to  go  look  at  this  documentation,  go  pull 
these  documents  for  us. 

So  that  is  why  the  defense  believes  Professor  Benkler 
should  be  allowed  to  talk  about  how  that  trend  changed  from  viewing 
WikiLeaks  as  a  source  of  legitimate  journalistic  information,  and 
he'll  also  testify  that  they  received  awards  on  internet  freedom  and 
index  on  internet  freedom  for  its  work,  to  now  being  public  enemy 
number  1,  and  trying  to  lump  my  client  with  that  in  order  to 
bootstrap  in  some  argument  that  there  was  an  aiding  of  the  enemy. 

MJ:  Go  ahead  with  your  questioning  and  I'll  take  the  questions 
as  they  come.  Go  ahead. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  Professor  Benkler  - 

TC [MAJ  FEIN]:  Ma'am,  can  the  government  still  be  heard  on  this? 

MJ:  Go  ahead. 
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1  ATC [CPT  MORROW]:  We'll  make  a  couple  of  brief  points.  Your 

2  Honor.  The  charged  offenses  were  completed  in  May  —  up  to  May  2010. 

3  MJ:  The  publications  were  later. 

4  ATC [CPT  MORROW]:  That's  correct.  Your  Honor,  but  the  wanton 

5  piece  refers  to  PFC  Manning's  actions  wantonly  caused  to  be 

6  published.  Everything  refers  to  PFC  Manning's  actions.  What  the 

7  defense  is  referring  to  is  now,  you  know,  first  of  all  there's  no 

8  evidence  that  PFC  Manning  knew  any  of  this,  which  speaks  to  the 

9  relevancy  of  this  entire  thing.  But,  again,  the  actual  completed 

10  offenses  happened  in  May  2010.  That  should  be  the  relevant 

11  timeframe,  up  to  May  2010,  if  we're  going  down  the  road  of  what  was 

12  WikiLeaks  and  how  were  they  viewed  or  how  were  they  portrayed,  et 

13  cetera,  or  how  they  viewed  themselves. 

14  Mr.  Coombs  mentioned  enemy  possession.  Again,  he's 

15  conflating  the  elements.  The  element  is  the  knowledge  of  WikiLeaks 

16  prior  to  May  2010.  We  have  to  prove  possession  of  the  intelligence 

17  by  the  enemy,  but  that's  a  separate  element  entirely. 

18  MJ:  All  right,  government,  I  don't  agree.  I  see  the  relevance 

19  on  the  type  of  journalistic  organization,  if  they  are  a  journalistic 

20  organization,  is  relevant  to  the  recklessness  if  you  will.  I  agree 

21  what  PFC  Manning  knew  at  the  time  goes  to  his  intent.  There's  — 

22  we'll  wait  until  we  get  to  the  questions  about  government  reactions, 

23  because  I  am  not  seeing  the  relevance  of  that.  Go  ahead. 
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CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  let's  go  back  to  the  question  I  asked.  Prior  to  — 
actually,  I'm  going  to  move  on  to  what  conclusions  again  did  you 
reach  about  WikiLeaks  as  an  organization  based  upon  your  research? 

MJ:  Is  there  any  foundation  for  that? 

CDC [MR.  COOMBS]:  The  research  that  he  did  on  WikiLeaks,  ma'am, 
that  I  covered. 

MJ:  All  right.  Go  ahead. 

Questions  by  the  civilian  defense  counsel  continued: 

A.  Based  on  the  research  that  I  have  done,  I  see  WikiLeaks  as 
an  organization  that  fulfilled  a  discrete  role  in  network  journalism 
of  providing  a  network  solution  to  leak-based  investigative 
journalism  that  in  the  past  was  done  only  by  relatively  large  and 
unified  organizations  and  now  could  be  done  in  a  network  mode.  The 
primary  role  that  I  saw  WikiLeaks  as  playing  —  so,  for  example,  just 
to  give  a  little  bit  of  context. 

In  software  development  what  happened  with  network 
production  is  that  it  used  to  be  all  Microsoft  or  IBM,  everything 
internal.  What  happened  with  network  production  is  you  got  a 
decomposition  of  the  functions.  So,  for  example,  in  operating 
systems  you've  got  a  group  developing  the  Linux-Kernel  and  then 
you've  got  a  whole  bunch  of  other  groups  some  commercial,  like  Novell 
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or  Red  Hat,  some  non-profit,  like  the  Shuttleworth  Foundation,  some 
volunteer  networks  like  Debian,  each  pulling  together  that  colonel 
with  a  bunch  of  other  things  to  create  the  operating  system  that  we 
know  as  the  Linux  operating  system. 

WikiLeaks  did  essentially  the  same  thing.  If  you  imagine 
the  Washington  Post  finding  Deep  Throat,  creating  the  conditions  of 
secrecy  for  the  confidential  --  for  the  source,  and  then  being  able 
to  protect  that  source,  that  required  a  certain  amount  of  heft.  If 
you  think  of  the  Pentagon  papers,  again  you  receive  it,  you  do  the 
analysis  but  you  also  have  the  money  to  go  and  defend  it  in  court. 

In  the  network  tremor  there  are  a  lot  of  organizations  that  don't 
have  the  organizational  heft  to  do  all  of  that,  but  they  do  have  the 
ability  to  provide  insight.  So  WikiLeaks,  just  like  Linux-Kernel 
Development  produces  a  core  part  of  the  software;  WikiLeaks  provides 
a  solution  for  how  network  journalism  can  stabilize  leak-based 
investigative  journalism  in  the  face  of  diminishing  newsrooms,  much 
poorer  organizations,  much  less  of  a  well-structured  way  of  defending 
it  in  court. 

So  that's  what  I  see  WikiLeaks  in  this  context  of  doing  as 
an  organization,  providing  a  discrete  but  critical  component  of  what 
in  the  past  was  always  integrated  in  a  single  organization. 
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Q.  From  your  research,  how  did  WikiLeaks  then  fit  in  with 
other  journalistic  —  did  it  fit  in  with  the  idea  of  a  journalistic 
organization  from  your  research? 

A.  Yes,  absolutely.  I  think  it  did. 

Q.  And  based  upon  your  explanation  there,  how  did  other  more 
traditional  journalistic  organizations  then  take  advantage  of  what 
WikiLeaks  was  doing? 

A.  So  they  would  take  the  materials  and  provide  more  context, 
more  analysis,  integrated  into  storage,  obviously  much  wider 
dissemination  than  WikiLeaks  itself  did.  So  if  you  think  of  the 
press's  —  if  you  think  of  journalism  from  the  mentor  function  as 
about  gathering  of  information  relevant  to  public  concern  and  its 
dissemination  to  the  public,  a  lot  of  these  other  organization  spent 
the  time  working  both  on  the  relevancy  and  the  dissemination,  while 
WikiLeaks  did  essentially  the  gathering,  the  authentication  and  the 
initial  selection  for  dissemination  to  these  further  analyses. 

Q.  Now,  as  part  of  your  research,  did  you  look  at  how 
WikiLeaks  was  viewed  prior  to  the  releases? 

A.  Yes,  absolutely. 

Q.  And  how  did  you  do  this? 

MJ:  Releases  of  what? 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Prior  to  the  releases  charged  in  this  case? 
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A.  Among  other  things,  I  read  every  single  news  report  that 
mentioned  the  word  WikiLeaks  from  before  March  31st,  2010,  at  least 
as  they  appeared  on  the  West  Law  database,  about  700  articles. 

Q.  Prior  to  2010,  what  type  of  documents  did  WikiLeaks 
publish? 

A.  So  it  published  a  range  of  documents.  These  included,  for 
example,  internal  documents  from  the  Swiss  Bank  Julius  Baer  relating 
to  mechanisms  for  helping  clients  use  Cayman  Islands  accounts  for  tax 
avoidance.  They  included  materials  from  the  Icelandic  bank  Kauphing, 
which  apparently  had  engaged  in  activities  that  ended  up  after  the 
description  in  WikiLeaks  resulting  in  an  investigation  of  the  Serious 
Fraud  Unit  in  the  UK  because  they  had  defrauded  some  local  British 
municipalities  just  before  they  bankrupt  in  2008,  or  after  the 
crisis,  I  mean. 

They  had  described,  for  example  —  they  had  published 
internet  filtering  software  lists  that  were  used  in  Australia  and 
Denmark  and  Norway  as  antiporn  filtering  but  were  extremely  crudely 
designed  so  that  created  a  significant  political  backlash. 

Ironically  WikiLeaks  itself  in  Australia  was  placed  within  this  list 
but  that's  a  context  in  which  the  publication  of  the  list  led  to 
public  debate,  public  opposition  and  eventually  the  abandonment  of 
the  policy. 
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They  published  a  copy  of  what  was  then  a  secret  negotiated 
trade  treaty,  the  anti-counterfeiting  trade  treaty,  that  was 
enormously  controversial  politically  across  the  20  countries  in  which 
it  was  proposed.  After  its  publication  ultimately  it  resulted  in 
protests  throughout  most  of  the  EU  member  states  and  European 
parliament  rejected  it  and  wasn't  willing  to  ratify  it  or  at  least 
the  member  states  were  not. 

Then,  of  course,  there  were  a  variety  of  materials  on  the 
U.S.  Some  of  which  were  reported  in  the  counterintelligence  report 
and  some  of  which  I've  already  mentioned,  the  Camp  Delta  operations. 

Q.  Did  WikiLeaks  have  a  published  mission  statement  prior  to 
April  2010? 

A.  Yes,  they  did.  They  —  their  mission  statement  was 
primarily  focused  on  exposing  corruption  and  unethical  behavior  of 
authoritarian  regimes  in  Asia,  former  Soviet  bloc  countries,  Africa, 
sub-Saharan  Africa,  but  in  the  mission  statement  they  also  said  they 
would  support  exposures  of  unethical  behaviors  by  people  everywhere 
in  every  country. 

Q.  And  how  did  WikiLeaks  go  about  trying  to  expose  unethical 
practices,  illegal  behavior  and  wrongdoing  within  corrupt 
corporations  and  governments? 

A.  They  created  what  was  essentially  a  safe  platform  for 
people  who  were  close  to  the  materials,  who  had  knowledge  on  the 
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inside  to  leak  materials  for  public  revelation  and  the  platform  was 
intended  both  to  provide  secrecy  and  security  for  the  person  leaking 
and  to  provide  a  mechanism  for  some  level  of  authentication  of  the 
voracity  of  the  documents  before  they  were  placed  online  and  in  the 
ideal  model  also  a  place  for  people  to  comment  on  the  materials  after 
they  were  made  online.  Although  that  was  a  less  significant 

component  at  the  end  of  the  day  of  the  —  of  the  site  when  it 

actually  was  in  operation. 

Q.  Did  WikiLeaks  target  any  specific  companies  for  its  leaks? 

A.  It's  hard  to  say  that  it  targeted  particular  companies.  It 
was  more  a  question  of  what  came  in  the  door  that  was  actually  there. 
As  I  said,  some  of  the  most  important  corporate  issues  were  not  from 
the  U.S..  There  was  very  little  that  was  U.S.  specific.  There  was  a 
document  from  J.P.  Morgan  that  could  have  been  - 

MJ:  What  time  frame  are  we  talking  about? 

A.  This  is  in  the  2007  to  2009  timeframe.  There  was  a 

document  from  J.P.  Morgan  that  was  arguably  a  how-to  on  insider 
trading  for  clients  without  getting  caught  but  that  was  about  it  from 
the  U.S.  side. 

I'd  say  the  most  significant  corporate  disclosures  that  got 
really  public  attention  were  the  Julius  Baer  Swiss  Bank  story.  There 
was  a  major  story  in  the  UK  of  a  Swiss  registered  UK  based  oil 
exploration  company,  Trafigura,  that  had  an  internal  engineering 
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report  showed  that  it  actually  knew  that  it  had  dumped  toxic  waste 
off  the  coast  of  the  Ivory  Coast. 

There  were  several  banking  related  issues.  There  was  one 
banking  related  issue  with  a  government  bailout  of  Northrop  Bank  in 
the  UK,  there  was  Barclay's  Bank,  there  were  a  couple  of  Icelandic 
Banks,  as  I  mentioned  the  Kaupthing  Bank.  Those  were  the  type  of 
corporate  corruption  related  things  that  got  attention. 

Q.  And  did  WikiLeaks  target  any  specific  countries  for  its 
leaks? 

A.  Formally  it  targeted  —  its  primary  formal  statement  was  it 
was  particularly  interested  in  authoritarian  countries  as  I  said 
particularly  in  Asia,  sub-Sahara  Africa,  post-Soviet  republics  and 
the  Middle  East.  Realistically,  I  would  say  the  single  most 
important  disclosure  from  an  authoritarian  country  was  the  disclosure 
of  the  Green  Ban  program  in  China.  This  was  a  program  that  was  built 
in  China  as  a  way  of  protecting  youth  from  porn.  It  was  supposed  to 
be  —  essentially  Chinese  PCs  were  supposed  to  be  impregnated  with  a 
filter  that  would  protect  children  from  porn.  When  the 
specifications  were  leaked  and  released  on  WikiLeaks,  it  turned  out 
that  the  program,  in  fact,  does  a  lot  more  censorship  than  the 
government  wanted  and  despite  the  fact  that  it's  not  a  democratic 
government,  there  was  sufficient  public  uproar  that  the  program  was 
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abandoned.  That  was  the  single  most  important  investigative  act  that 
resulted  in  a  really  act  of  authoritarian  countries. 

Obviously  the  Kenyan  —  the  report  on  Kenyan  ex- judicial 
killings  that  was  subject  of  the  award  from  Amnesty  International  was 
another  major  authoritarian  country. 

I'd  say  most  of  the  revelations  came  from  completely 
democratic  countries  or  broadly  democratic  countries,  like  Thailand 
where  another  internet  censorship  project  was  exposed  showing,  for 
example,  that  the  government  among  other  things  was  trying  to  filter 
The  King  and  I  because  of  the  way  —  the  old  version,  because  of  the 
way  it  portrayed  the  king,  and  the  filtering  things  that  I  mentioned 
before . 

Q.  Based  upon  those  articles,  you  indicated  that  WikiLeaks 
received  an  award.  What  awards  did  WikiLeaks  receive? 

A.  WikiLeaks  received  two  major  awards.  One  from  the  British, 
the  British  organization.  Index  on  Censorship,  which  is  a  major  —  a 
major  organization  tracking  press  freedom  throughout  the  world.  And 
the  other  was  from  Amnesty  International.  The  Index  on  Censorship 
was  2008,  and  Amnesty  International  was  2009. 

Q.  At  this  point  did  WikiLeaks  have  any  published  statement 
regarding  how  it  viewed  freedom  of  the  press? 

A.  Yes.  WikiLeaks  —  WikiLeaks  had  a  published  statement.  It 
cited  essentially  —  it  was  anchored  in  the  Pentagon  papers  case  and 
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its  core  argument  was  that  the  role  of  the  free  press  is  to  assure 
that  the  government  does  not  deceive  its  people  and  that  a  free  press 
is  the  only  guarantor  that  the  government  cannot  deceive  its  people, 
specifically  mentioning  a  variety  of  other  components  of  that 
decision.  But  that  was  the  core  —  the  core  argument  was  that 
transparency  was  absolutely  necessary  to  good  government  and  to 
democracy. 

Q.  And  based  upon  your  overview  of  WikiLeaks'  activities  prior 
to  April  of  2010,  how  was  WikiLeaks  portrayed  online  and  in  print 
media? 

A.  So  I'd  say  there  are  somewhere  between  two  and  three  major 
periods . 

The  first  6  to  8  months  from  the  launch  more  or  less  in 
late  2006,  until  the  middle  of  2007,  there's  a  lot  of  speculation. 

For  obvious  reasons  the  organization  had  not  really  started  to 
function.  This  is  the  time  in  which  we  see  most  of  the  standard 
responses  to  any  kind  of  new  network  organizations.  Very  similar  to 
what  we  saw  with  free  software  and  how  it  was  described  in  the  late 
'90s,  very  similar  to  what  we  saw  with  Wikipedia  and  how  it  was 
described  in  the  early  2000s.  And  that's  essentially,  how  are  we 
going  to  get  authenticity,  how  are  we  going  to  get  responsibility  and 
how  are  we  going  to  know  what  the  quality  is.  A  lot  of  speculation. 
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At  the  time,  also  I  think  this  was  a  transition  where 
Wikipedia  suddenly  became  respectful,  and  I  think  that's  why 
WikiLeaks  picked  the  name,  even  though  it  was  completely  unrelated. 

So  there  was  a  question  of  how  would  people  —  how  would  this  thing 
work?  Could  anybody  look  at  the  documents  and  then  decide.  How 
would  we  then  preserve  any  kind  of  anonymity?  There  was  a  lot  of 
concern  over  whether  there  would  be  too  much  exposure  and  too  little 
authenticity,  together  with  excitement  about  here's  this  new  model 
and  what  was  the  future  of  journalism. 

Once  WikiLeaks  actually  began  to  operate  in  mid  2007 
to  late  2007,  the  narrative  shifted  quite  a  bit  more  towards  a 
whistle  blowing  organization,  a  whistle  blowing  site  based  on  the 
very  small  number  of  leaks  that  became  public  at  the  time.  I'd  say 
the  major  transition  point  came  around  the  issuance  of  the  injunction 
in  the  Julius  Baer  case  in  early  2008.  And  that  was  the  moment  at 
which  really  WikiLeaks  was  described  widely  through  the  press  as  a 
new  online  journalistic  organization. 

In  that  case  there  was  an  amicus  brief  filed  by  the 
Reporters'  Committee  on  Freedom  of  the  Press,  Gannett,  Associated 
Press,  the  Newspaper  Editors  Association,  all  of  them  filed  amicus 
briefs  saying  you  can't  shut  this  down.  The  New  York  Times  came  out 
with  an  editorial  that  basically  opened  with  the  words  roughly,  "New 
online  journalism  creates  a  new  front  in  freedom  of  the  press."  It 
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described  WikiLeaks  as  a  muck-racking  site  and  analogized  explicitly 
the  shutting  down  of  WikiLeaks  by  the  injunction  to  shutting  down  a 
whole  newspaper  because  of  an  objectionable  article.  The  LA  Times 
called  it  a  muck-racking  site.  The  Economist  described  it  as  — 
described  the  process  and  said  there  were  journalists  and  lawyers 
looking  at  the  materials  before  they  were  argued  under  the 
Distinguished  Advisory  Board. 

When  WikiLeaks,  for  example,  released  congressional 
research  service  reports  a  few  months  later.  Senator  Lieberman  came 
out  and  said  we  should  be  doing  this  and  actually  praised  WikiLeaks 
substantially.  The  Federal  Times,  the  primary  paper  for  federal 
employees,  came  out  and  said  WikiLeaks  is  a  site  maintained  by 
investigative  journalists  and  transparency  fans  dedicated  to  and  open 
and  transparent  government,  described  it  in  these  terms.  Obviously 
there  were  many  stories,  some  of  them  less  explicit,  but  that's  the 
tenor  that  essentially  began  to  emerge  from  Julius  Baer  and  then 
later  on  throughout  2008  and  really  throughout  much  of  2009. 

Q.  Prior  to  April  of  2010,  in  your  research  did  you  see 
anything  to  connect  WikiLeaks  with  a  terrorist  organization? 

A.  No. 

Q.  And  prior  to  April  2010,  did  you  see  anything  to  connect 
WikiLeaks  with  any  sort  of  terrorist  groups  providing  information  to 
terrorist  groups? 
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A.  No. 

Q.  I  now  want  to  ask  you  a  few  questions  about  how  the 
portrayal  of  WikiLeaks  began  to  change  after  they  started  publishing 
certain  documentation  charged  in  this  case.  Okay? 

A.  Yes. 

Q.  Did  the  portrayal  of  WikiLeaks  start  to  change  in  2010? 

A.  It  did.  Substantially. 

Q.  And  when  did  this  change  begin? 

A.  I'd  say  the  primary  shift  occurs  around  the  —  concomitant 
with  the  release  of  the  Iraq  war  logs  later  in  2010. 

Q.  Now  - 

A.  That's  the  portrayal  in  the  media.  Then  there's  a  public 
response  earlier  than  that  after  the  release  of  the  Afghanistan  war 
logs . 


Q.  We'll  talk  about  this  in  a  moment.  But  I  want  to  backtrack 
just  for  a  second  and  go  back  to  your  article.  One  of  the  things 
that  you  considered  in  your  article  was  a  2008  Pentagon  report? 

A.  Yes. 

CDC [MR .  COOMBS]:  I'm  handing  the  witness  what  has  been  marked 

as  PE  45  —  what  is  PE  45  [handing  PE  45  to  witness] . 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Do  you  recognize  that? 

A.  I  do. 
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Q.  What  is  that? 

A.  This  is  the  unclassified  version  of  the  report  that  I 
looked  at  as  part  of  my  research  for  this  article. 

Q.  And  based  upon  your  review  of  this  article,  what  was  the  PE 
45  largely  based  upon? 

A.  It  was  largely  based  on  reading  the  WikiLeaks  site  itself 
and  on  other  open  source  materials,  perhaps  some  news  stories, 
perhaps  some  research  online. 

Q.  Did  you  see  anything  in  the  report  that  you  couldn't  also 
find  in  unclassified  reporting  on  the  internet? 

A.  Probably  two  things.  There  were  - 

Q.  Before  you  talk  about  that,  are  those  two  things  currently 
now  in  that  document? 

A.  Yes. 

Q.  Are  any  of  those  things  in  a  footnote? 

A.  No. 

Q.  Okay.  So  what  were  the  two  things? 

MJ:  Hold  on.  Yes? 

ATC [CPT  MORROW]:  Objection.  Relevance. 

MJ:  What  is  your  question? 

CDC [MR.  COOMBS]:  My  question  was:  Did  he  find  anything  in 

this  document  that  was  not  already  available  in  open  source 
information?  The  relevance  part  I'm  going  to  talk  about  is  how  this 
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article,  which  I  believe  the  government  is  using  PE  45  to  claim  that 
PFC  Manning  should  have  known  from  this  that  he  would  have  actual 
knowledge  that  he  was  giving  information  to  the  enemy.  I'm  going  to 
use  Professor  Benkler  to  describe  the  content  of  the  document. 

MJ:  I  can  read  the  content  of  the  document.  Why  do  you  need  to 

do  that? 

CDC [MR.  COOMBS]:  That's  granted  that  you  could.  Your  Honor, 

but  Professor  Benkler  will  talk  about  where  the  content  of  the 
document  came  from  which  I  don't  know  if  the  Court  would  know  that 
intuitively  from  looking  at  the  document  and  also  explain,  you  know, 
basically  some  of  the  logical  leaps  in  that  document. 

MJ:  I'll  let  you  go  and  talk  about  the  document  and  what  was  in 

open  sources.  That's  relevant. 

CDC [MR .  COOMBS]:  Okay,  Your  Honor. 

MJ:  I  see  the  questions  as  they  continue,  go  ahead. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  we  actually  don't  really  need  to  talk  about  the  two 
items  in  particular.  So  based  upon  - 

A.  Basically  it  was  almost  all  open  source  material. 

Q.  Did  you  see  anything  in  this  document  that  supported  the 
idea  that  WikiLeaks  provided  information  to  the  enemy? 

A.  No.  What  there  was  here  were  theoretical  statements  about 
how  the  enemy  could  come  and  use  this.  Particularly  with  a 
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particular  emphasis  on  how  the  enemy  could  try  to  use  it  for 
propaganda  to  inject  false  information  and  have  perceptual 
management.  But  no  real  --  other  than  speculation,  no  evidence  that 
there  had  actually  been  any  use  by  any  enemy. 

Q.  Did  the  2008  Pentagon  report  cite  any  evidence  to  suggest 
that  the  enemy,  in  fact,  went  to  WikiLeaks? 

A.  No,  there  was  no  evidence  here  that  anyone  had  actually  — 
that  any  enemy  had  in  fact  used  WikiLeaks. 

Q.  In  general,  how  would  you  describe  this  report? 

A.  Frankly,  it  was,  I  thought,  a  relative  mediocre  effort  - 

MJ:  I'm  going  —  this  —  this  witness  is  not  an  expert  in 

intelligence.  That  is  not  relevant.  Move  on,  please. 

CDC [MR .  COOMBS]:  Your  Honor,  Defense's  position  is  this  is 

not  intelligence.  That's  why  I  asked  the  question  whether  or  not 
most  of  this  item  —  most  of  the  information  came  from  open  source. 
The  Defense's  position  is  if  you  compared  what's  in  this  document 
with  open  source  information  in  many  regards  it's  pulled  verbatim. 

So,  for  example  - 

MJ:  You  can  ask  all  of  those  questions,  just  not  an  opinion  on 

the  value  - 

CDC [MR.  COOMBS]:  The  witness  is  an  expert  though  in  what  he 

reviewed  and  what  he  reviewed  was  the  open  source  documentation 
related  to  WikiLeaks,  in  particular  to  WikiLeaks'  website  and  used 
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this  article,  this  2008  report,  extensively  in  his  article  that  he 
published.  So  he  verified  —  he  verified  what  was  in  the  information 
in  this  article.  Everything  in  here  is  from  open  source. 

MJ:  That's  fine.  Just  no  opinions  on  whether  it's  speculation, 

whether  it's  —  he's  not  qualified  to  do  that. 

CDC [MR.  COOMBS]:  The  question  I  was  asking  him.  Your  Honor, 

what  was  his  opinion  of  this  article,  if  allowed,  he  would  say  this 
article  is  basically  premised  solely  upon  open  source  information. 

MJ:  That's  fine. 

CDC [MR.  COOMBS]:  And  speculation  at  that  point. 

MJ:  That's  fine. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Okay. 

A.  This  article  was  based  on  open  source  information.  Many  of 
its  key  judgments  were  speculative  and  were  not  supported  by  evidence 
in  the  document  itself.  It  included  as  a  core  statement  both  in  the 
executive  summary  and  in  the  body  an  assertion  that  WikiLeaks  does 
not  engage  in  any  authentication,  an  assertion  that  was  already  known 
at  the  time  based  on  publicly  available  reports  to  be  false,  simply 
mistaken.  Because  already  at  the  time  that  this  report  was  created 
there  had  already  been  a  major  shift  in  the  understanding  of  how 
WikiLeaks  was  authenticating  materials  from  roughly  the  same  period. 
There's  a  report  in  the  New  Scientist  where  Steven  Aftergood  from 
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Federation  of  American  Scientists  who  had  been  an  early  vocal  critic 
of  WikiLeaks  precisely  on  the  question  of  lack  of  authentication 
comes  back  and  says,  look,  there  are  lots  of  leaks  sites.  What 
WikiLeaks  has  done  is  to  professionalize  the  model  of  intake, 
selection  and  authentication.  This  is  a  time  at  which  only  a  month 
later  the  L.A.  Times  issues  a  report  that  compared  this  to  another 
site,  LiveLeak. 

The  thing  that  is  special  about  WikiLeaks  is  that  it 
authenticates  and  fewer  than  1  percent  of  the  materials  are 
potentially  —  are  identified  as  potentially  authentic.  So  this  is  a 
time  at  which  everybody  in  public  knows  that  WikiLeaks  is  different 
in  the  sense  that  it  authenticates.  But  the  report,  as  a  key  part  of 
its  analysis,  in  the  executive  summary  and  the  body  says  WikiLeaks 
has  a  stated  policy  of  not  authenticating,  it's  simply  false,  a 
mistake,  not  false  in  the  sense  of  bad  intent.  Simply  a  mistake. 

Q.  Does  anything  in  the  report  support  or  undercut  the 
determination  that  WikiLeaks  is  an  investigative  journalistic 
organization? 

A.  No.  Quite  the  contrary.  I'd  say  that  there  are  multiple 
references  throughout  the  report  that  would  lead  a  reasonable  reader 
to  see  WikiLeaks  as  a  journalistic  organization.  At  one  point  the 
report  says  on  the  9th  of  November  2007,  WikiLeaks  published  an 
investigative  report  on  such-and-such.  In  this  case,  it  was  on  the 
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use  of  chemical  weapons  by  U.S.  forces.  In  many  places  it  describes 
WikiLeaks  staff  writers  or  editors.  It  describes  Julian  Assange, 
WikiLeaks  foreign  staff  writer,  co-authors  are  repeated  again  and 
again . 

The  whole  of  Appendix  B  is  a  careful  analysis  of  what 
WikiLeaks  did  in  the  context  of  tables  of  equipment  which  included, 
based  on  this  appendix,  computerized  search  and  structuring,  cross- 
referencing  with  open  source  material,  provision  of  context.  Most 
journalistic  organizations  would  be  extremely  proud  to  have  the 
capacity  to  take  a  complex  set  of  technical  materials. 

There's  a  point  at  which,  for  example,  the  report  describes 
WikiLeaks  reaching  out  to  national  ground  intelligence  staff  to 
verify  a  particular  report  regarding  the  battle  of  Fallujah  and 
actually  says,  they  had  high  journalistic  professionalism  in  reaching 
out  to  try  to  assure  fair  use.  So  I'd  say  that  based  on  all  of 
these,  somebody  that  comes  away  reading  this,  states  this  is  a 
journalistic  organization  that  the  author  of  the  report  is  worried 
about.  But  there  is  little  doubt  that  it's  a  journalistic  —  hard¬ 
hitting  journalistic  investigative  organization. 

Q.  Is  there  anything  in  the  2008  Pentagon  report  that  supports 
undercutting  —  treating  WikiLeaks  any  differently  than  the  New  York 
Times ? 
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A.  No,  I  don't  think  so.  I  think  if  anything,  it's  precisely 
these  repeated  references  to  investigative  report,  to  staff  writer, 
to  foreign  staff  writer,  to  co-authors,  to  the  degree  of  analysis, 
frankly.  There  are  places  in  this  report  where  the  author  disagrees 
with  the  legal  interpretation  of  a  WikiLeaks'  story.  So  clearly 
there  is  investigation,  there  is  a  story,  there  is  a  framework  with 
which  the  report  of  the  article  is  arguing.  These  are  the  things  at 
the  very  core  of  investigative  journalism.  You  find  the  fact,  you 
understand  the  context  and  create  the  critique.  You  walk  away  from 
this  and  you  say  this  is  what  this  organization  is  doing,  at  least  if 
this  is  all  you're  reading  about  it.  You  worry  about  it,  but  it's  a 
journalistic  organization. 

Q.  I  would  like  to  talk  about  the  article  that  you  wrote  and 
the  various  time  periods  that  you  marked  as  a,  kind  of  a  change  in 
how  WikiLeaks  is  being  viewed.  Okay? 

A.  Yes. 

Q.  I'd  like  to  first  start  off  with  the  publication  of  the 
Apache  video  charged  in  this  case. 

A.  Yes. 

Q.  When  was  that? 

A.  April  5th,  2010. 

Q.  And  how  was  the  video  released  by  WikiLeaks? 
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A.  The  video  was  released  in  a  press  conference  at  the 
National  Press  Club. 

Q.  How  was  the  video  received  by  the  media  at  that  point? 

A.  I'd  say  there  were  split  views.  The  New  York  Times  wrote 
about  this  in  the  framework  of  saying  with  this  release  WikiLeaks  is 
edging  closer  to  investigative  journalism.  An  advocacy  talked  about 
how  —  described  how  WikiLeaks  had  five  full  time  employees  reviewing 
the  materials.  How  they  had,  at  least  according  to  this  report,  800 
to  a  thousand  area  experts  that  were  looking  at  the  materials  and 
trying  to  understand  what  was  and  was  not.  How  they  had  collaborated 
with  an  Icelandic  television  station  and  spent  $50,000,  to  send  two 
reporters  over  to  Iraq  to  verify  and  provide  context  of  the 
background.  So  this  was  the  New  York  Times  response. 

The  head  of  Reuters  talked  about  the  video  as  being 
incredibly  troubling  but  something  that  was  important  to  watch.  But 
there  was  also  a  lot  of  criticism.  There  was  a  lot,  this  was,  that 
the  editing  in  particular  was  unfair.  I'd  say  Fox  News  was  the 
primary  proponent  of  that  particular  view,  that  the  editing  was  very 
unfair  and  not  appropriate. 

Q.  Now,  I  want  to  go  to  the  next  charged  release.  What  was 
the  next  set  of  documents  that  WikiLeaks  released? 

A.  These  were  the  Afghan  war  logs  in  July  of  2010. 


10257 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


Q.  Before  publication,  did  WikiLeaks  partner  with  any 
traditional  media  organizations? 

A.  Yes,  it  did.  It  partnered  with  the  New  York  Times,  the 
Guardian  and  Der  Spiegel. 

Q.  What  was  the  nature  of  the  partnership? 

A.  WikiLeaks  handed  the  materials  over  to  the  news 
organizations  several  weeks  before  publication,  agreed  on  a 
publication  schedule  —  on  a  joint  publication  schedule  and  then  the 
newspapers  were  to  release  their  stories  as  well  as  some  of  the 
materials  at  the  same  day  that  WikiLeaks  would  publish  the  underlying 
materials  themselves. 

Q .  And  - 

A.  I'm  sorry. 

Q.  Go  ahead,  I'm  sorry. 

A.  Both  the  newspapers  and  WikiLeaks  would  publish  some 
portions,  although  in  very  different  proportions. 

Q.  Based  upon  that  publication,  how  did  the  view  of  WikiLeaks 
start  to  change,  if  at  all? 

A.  So  there  was  a  major  —  there  were  several  public 
statements  by  officials  that  I  think  began  to  shift  publicly. 

MJ:  Yes? 

ATC [CPT  MORROW]:  Objection,  Your  Honor.  Now  we're  getting  into 
the  reaction  - 
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MJ:  What  is  the  relevance  of  that? 

CDC [MR .  COOMBS]:  The  Defense's  position  is  based  upon  both 

the  —  and  I  can,  if  I  have  a  break,  I  can  give  you  the  prosecution 
exhibit  that  references  UBL  reaching  out  to  WikiLeaks.  The  Defense's 
position  is  that  rebuts  the  idea  that  the  enemy  would  use  WikiLeaks 
as  a  source  of  intelligence  initially  prior  to  these  leaks  because 
what  happens  is,  essentially  after  these  leaks  start  to  happen,  the 
government  rhetoric  against  WikiLeaks  makes  them  appear  to  be  an 
enemy.  And  that  —  that  rhetoric  is  what  drives  the  enemy  to 
actually  go  look  at  WikiLeaks,  not  the  actual  publication  of  the 
information.  So  - 

MJ:  Well,  I've  already  taken  judicial  notice  of  statements  that 
you've  given  me  with  respect  to  public  comments  about  WikiLeaks.  Why 
are  we  doing  it  through  this  witness? 

CDC [MR.  COOMBS]:  Well,  this  witness.  Your  Honor,  because  of 

his  article  —  and  that's  basically  part  of  the  focus  of  the  article 
is  explaining  how  a  journalistic  organization  is  basically  —  and 
especially  in  this  country,  is  changed  from  being  a  legitimate 
journalistic  organization  to  being  a  terrorist  organization  based 
upon  the  response  by  the  government.  And  the  government,  in  this 
case,  with  how  they  charged  it,  they  have  relied  upon  the  enemy  — 
information  of  the  enemy  going  to  WikiLeaks  which,  is  after  these 
comments  that  Professor  Benkler  will  talk  about  occurred.  Also,  when 
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you  look  at  both  the  UBL  stip,  the  redacted  and  unredacted,  and 
Commander  Aboul-Enein' s  stipulation,  which  is  PEs  153  Alpha  and  PE 
183. 

MJ:  Let  me  see  those  documents,  please.  Actually,  why  don't  we 

—  this  is  a  good  time  to  take  a  10-minute  recess.  I  would  like  to 
see  the  documents  that  you're  talking  about  before  making  a  ruling  on 
this  issue. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  Professor  Benkler,  during  your  recess,  please  don't  discuss 

the  testimony  with  anyone  other  than  the  counsel  or  accused. 

Court  is  in  recess. 

[The  court-martial  recessed  at  1116,  10  July  2013.] 

[The  court-martial  was  called  to  order  at  1140,  10  July  2013.] 

MJ:  Court  is  called  to  order. 

Let  the  record  reflect  all  parties  present  when  the  Court 
last  recessed  are  again  present  in  court. 

During  the  recess,  I  looked  at  the  exhibits  the  defense 
wanted  me  to  look  at.  I  would  like  both  parties  to  set  forth  their 
position.  And  defense  I  would  like  you  to  explain  to  me  exactly 
where  we  are  going  with  this  witness'  testimony  and  what  you  plan  to 
do  with  it.  Go  ahead. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 
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So  the  defense's  position  is  that  the  documentation  that 
the  Court  considered  provides  the  relevant  basis  for  why  we  want 
Professor  Benkler  to  talk  about  how  the  view  of  WikiLeaks  started  to 
change  as  each  of  these  releases  started  to  happen.  The  government 
has  offered  both  the  2009  Most  Wanted  List  and  the  other 
documentation  that  we  referenced  in  order  to  depict  WikiLeaks  as  an 
organization  that  PFC  Manning  should  have  known  would  have  given 
information  to  the  enemy.  In  fact,  they  actually  had  to  prove  he  had 
actual  knowledge  that  by  giving  it  to  WikiLeaks  he  was  providing  it 
to  the  enemy. 

The  defense's  position  on  this  is  that  anyone  looking  at 
WikiLeaks  prior  to  the  charged  releases,  including  the  2008  document 
produced  by  ACIC,  would  have  viewed  WikiLeaks  as  a  legitimate  news 
organization.  The  only  argument  to  start  to  question  that  begins 
after  these  releases  happen  and  the  government's  ultimate  responses 
to  each  release  and  how  that  rhetoric  gets  amped  up  after  each 
release.  And  it  is  that  and  the  Defense's  position  is  where  the 
government  gets  its  argument  that  there  should  be  any  concern  or 
knowledge  on  PFC  Manning's  part  that  WikiLeaks  might  provide 
information  to  the  enemy. 

Additionally,  the  defense's  position  is  that  the  enemy  went 
to  get  this  information  only  after  the  government's  responses  to  the 
leaks  and  that's  what  prompted  them.  So  from  the  defense's  position 
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this  not  only  rebuts  the  idea  that  PFC  Manning  would  have  had  any 
actual  knowledge  for  the  Article  104  offense,  but  it  also  for 
Specification  1  of  Charge  II,  it  rebuts  the  idea  of  any  wanton 
conduct  by  PFC  Manning  by  choosing  to  release  information  to  a 
legitimate  news  organization.  The  actual  release  of  that  information 
was  wrongful  and  he's  accepted  responsibility  for  that.  But  it  was 
not  wanton.  So  the  defense  believes  it  was  relevant  for  both  the 
Article  104  offense  and  also  with  regards  to  Specification  2  of 
Charge  II. 

Additionally,  we  would  envision  the  government  arguing  that 
WikiLeaks  was  or  is  anything  but  a  legitimate  news  organization.  If 
they  intend  to  do  that,  the  defense  believes  we  should  be  able  to 
provide  information  that  rebuts  that.  And  the  information  that 
Professor  Benkler  would  provide  would  be  how  that  view  of  WikiLeaks 
came  to  be  and  it  really  is,  as  a  result  of  the  government  rhetoric 
in  response  to  each  of  these  releases  that  it  even  started  to 
question  whether  or  not  WikiLeaks  was  a  legitimate  news  organization. 

The  defense  intends  to  go  through  each  of  the  charged 
releases.  We're  currently  at  the  Afghan  SIGACTS.  But  we  intend  to 
go  from  the  Afghan  SIGACTS  to  the  Iraq  SIGACTS,  to  the  diplomatic 
cables  and  then  come  to  a  conclusion.  We  do  not  intend  to  go  past 
just  the  actual  release  and  the  initial  response  by  the  government 
and  how  that  response  started  to  change  the  view,  at  least  in  the 
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public  conversation  of  WikiLeaks  both  in  the  American  public 
conversation,  just  in  general,  but  also  how  the  print  media  and  news 
media  started  to  portray  WikiLeaks  as  now  no  longer  part  of  the 
legitimate  news  organization.  But  we're  not  going  to  go  into  the 
other  aspects  of  Professor  Benkler's  article  that  talk  about  freezing 
assets  of  WikiLeaks  or,  you  know,  officials  asking  various  companies, 
like  MasterCard  and  PayPal  and  others  to  no  longer  participate. 

We're  not  going  down  that  road,  ma'am. 

MJ:  All  right.  Government,  you  just  heard  what  the  defense  is 

planning  to  do.  What  is  the  government's  position? 

TC [MAJ  FEIN]:  Yes,  ma'am.  A  few  first  to  note  for  the  record 
any  references  that  the  defense  is  arguing  what  PFC  Manning  might  or 
might  not  have  known  is  for  argument  and  there  is  actually  no 
evidence  before  court  of  that,  only  what  was  researched  in  SIPRNET 
through  the  ACIC  documents,  C3,  and  CISIR  training  he  received. 

The  government's  overall  objection.  Your  Honor,  is  that  the 
only  material  that  is  relevant  is  what  was  relevant  during  the  time 
what  PFC  Manning  could  have  known.  So  that  would  have  been  prior  to 
essentially  pretrial  confinement  forward.  And  that  would  then  be 
relevant  to  potentially  an  argument,  his  knowledge  on  WikiLeaks  and 
what  WikiLeaks  did  or  did  not  do.  So  any  evidence  of  the 
government's  reaction  after  the  commission  of  his  offenses  could  be 
irrelevant  to  the  charges  in  this  case.  And  that's  true  for 
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Specification  1  of  Charge  II  and  The  Charge  of  Specification  2.  So 
ultimately  it's  a  timing  issue.  Your  Honor. 

And  the  government  doesn't  intend  to  argue  at  all  about 
what  WikiLeaks  did  or  did  not  become.  It's  only  at  the  time  of  the 
commission  of  the  offenses  what  PFC  Manning  did  or  did  not,  should  or 
should  not  have  known. 

MJ:  Okay.  I've  considered  the  exhibits,  I've  listened  to 

argument  of  counsel.  Mr.  Coombs,  if  you  confine  your  examination  to 
the  leaks  and  the  reactions  thereafter  and  don't  go  beyond  that,  I 
will  allow  it. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  So  let's  talk  —  let's  go  back  to  the  Afghan  SIGACTS, 
Professor  Benkler.  When  were  these  documents  released? 

A.  July  of  2010. 

Q.  And  before  that  publication,  what  news  organizations  did 
WikiLeaks  partner  with? 

A.  The  New  York  Times ,  the  Guardian  and  Der  Spiegel. 

Q.  And  how  was  the  publication  of  the  Afghan  SIGACTS 
accomplished  or  done? 

A.  WikiLeaks  gave  the  materials  to  the  news  organizations  a 
few  weeks  prior  to  the  publication.  Each  organization  analyzed  the 
materials  as  it  did  in  its  own  professional  process  and 
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organizations.  The  four  organizations  agreed  on  a  date  on  which  the 
newspapers  would  release  their  stories  and  some  set  of  the  collection 
of  logs  and  WikiLeaks  would  release  a  larger  section  of  the  logs  at 
the  same  time. 

Q.  And  did  each  of  the  news  organizations  publish  ultimately 
all  the  Afghan  SIGACTS? 

A.  No,  they  didn't.  They  published  parts  of  them  depending  on 
what  their  stories  were. 

Q.  Now,  did  the  reporting  of  the  Afghan  SIGACTS  by  WikiLeaks 
and  other  news  organizations  generally  report  —  this  is  again  in 
general,  generally  report  on  issues  of  importance  to  the  public? 

A.  Yes.  They  were  considered  to  be  important.  There  were  no 
clear  major  smoking  gun  issues  that  were  raised.  Broadly  speaking, 
they  created  a  public  record  of  ground  view  realities  of  the  war  and 
that's  how  they  were  understood.  There  were  some  discrete  things 
that  were  —  that  raised  more  public  concern  but  they  were  viewed 
very  wide  and  reported  on  very  widely  as  matters  of  broad  public 
concern. 

Q.  How  did  the  United  States  respond,  again  in  general,  to 
this  publication? 

A.  A  couple  of  responses.  Admiral  Mullen  said  WikiLeaks  would 
have  blood  on  its  hands.  General  Jones  reported  publicly  to  have 
said  that  WikiLeaks  was  endangering  lives.  Those  were  the  primary 


10265 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


o 


9 


public  responses.  Although  Secretary  Gates  in  a  letter  to  Senator 
Carl  Levin  in  requests  to  a  formal  answer,  to  a  formal  report  on  what 
the  damages  done  by  the  disclosures  were,  reported  that  to  that  point 
none  had  occurred. 

Q.  Based  upon  this  time  period,  did  you  see  any  change  in  how 
WikiLeaks  was  being  viewed  or  started  to  be  viewed? 

A.  There  were  some  reports  in  the  media  broadly  that  were 
questioning  the  organization  but  the  shift  did  not,  in  a  significant 
way,  begin  until  later  in  the  stories. 

Q.  Did  the  same  questioning  of  WikiLeaks  apply  equally  to  the 
other  news  organizations  that  WikiLeaks  had  - 

A.  No,  absolutely  not.  Both  the  government  and  other  media 
had  no  similar  critique  of  the  other  organizations  of  the  New  York 
Times,  the  Guardian,  of  the  Der  Spiegel  for  reporting  on  and  making 
available  some  of  the  war  logs.  The  wrath  was  reserved  purely  for 
WikiLeaks . 

Q.  Now,  what  was  the  next  set  of  documents  or  documents  that 
WikiLeaks  released? 

A.  These  were  the  Iraq  SIGACTS  in  October  of  2010. 

Q.  And  before  the  publication  of  Iraq  SIGACTS  did  WikiLeaks 
partner  again  with  these  news  organizations? 

A.  The  same  three  news  organizations. 

Q.  And  how  was  the  publication  of  the  Iraq  SIGACTS  handled? 
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A.  In  similar  ways.  Again,  materials  were  available,  a 
publication  date  was  agreed  on  and  the  materials  were  published 
alongside  the  stories. 

Q.  And  again,  in  general,  how  was  the  publication  of  Iraq 
SIGACTS  part  of  the  —  of  importance  to  public  and  public 
consumption? 

A.  So  again,  these  were  raised  very  publicly  as  an  important 
insight  into  how  the  war  was  going  on.  It  was  understood  and  reported 
by  different  media  in  different  ways.  The  New  York  Times  emphasized 
more  of  the  texture  and  the  reality  and  the  sense  of  providing  the 
American  public  with  a  sense  of  what  the  war  looked  like.  There  were 
discrete  disclosures  that  were  understood  to  have  actually  raised 
significant  differences  from  what  the  public  record  had  been  before 
and  these  were  reported  on  as  discrete  revelations.  That  was  the  way 
in  which  it  was. 

Q.  How  did  the  United  States  respond  to  this  publication? 

A.  The  response  was  similar,  although  the  direct  response  in 

terms  of  the  demand  for  non-publication  was  similar.  The  public 
response  was  not  as  clearly  vocal  as  it  was  to  the  first  instance  or 
what  it  would  become  to  the  last  of  the  instances. 

Q.  And  what  was  the  next  set  of  documents  released  by 
WikiLeaks? 
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A.  These  were  the  Embassy  cables.  The  first  272  of  which  were 
released  on  November  28th  of  2010,  known  as  the  Embassy  cable 
release . 

Q.  And  before  this  publication,  did  WikiLeaks  partner  with 
traditional  media  organizations? 

A.  Yes,  they  did.  They  partnered  with  the  Guardian ,  Der 
Spiegel ,  Le  Mode  and  El  Pais.  They  had  excluded  the  New  York  Times 
this  time  because  the  New  York  Times  had  run  an  extremely  derogatory 
story  on  Assange  alongside  with  the  Afghan  war  logs  and  this  was  seen 
as  inappropriate  by  WikiLeaks.  But  then  the  Guardian  passed  on  the 
materials  to  New  York  Times  so  that  as  a  practical  matter  the 
collaboration  worked  very  similarly  to  the  first  round,  except  for 
the  addition  of  Le  Monde  and  El  Pais. 

MJ:  Did  you  say  the  derogatory  story  was  after  the  release  of 

the  Afghan  war  logs? 

WIT:  Alongside  the  release  of  —  I'm  sorry,  the  Iraq  war  logs.  I 
apologize.  I  misspoke. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  In  general,  again,  how  was  the  public  reception  to  the 
release  of  the  diplomatic  cables? 

A.  It  was  odd.  These  cables  were  released  in  a  much  more 
controlled  and  measured  way  than  either  of  the  prior  two,  even  though 
the  prior  two  themselves  had  had  degrees  redaction  and  control  in  the 
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WikiLeaks  set.  But  the  response  is  hard  to  define  as  anything  but 
shrill.  Secretary  of  State  Clinton  described  it  as  an  attack  on  the 
international  community.  Vice  President  Biden  on  a  television 
interview  said  that  Assange  was  more  like  a  high  tech  terrorist  than 
the  Pentagon  papers.  Representative  Steve  King  who  was  then  incoming 
chair  of  the  Homeland  Security  Committee  in  the  House  called  for 
WikiLeaks  to  be  described  —  to  be  defined  as  a  foreign  terrorist 
organization.  Senator  Diane  Feinstein,  who  was  then  the  chair  of  the 
Senate  Intelligence  Committee,  called  for  prosecution  of  Assange 
under  the  Espionage  Act.  And  Senator  Lieberman  called  for,  who  was 
then  chair  of  the  Senate  of  the  Committee  on  Homeland  Security, 
called  for  companies  to  stop  providing  services  to  WikiLeaks. 

Q.  Did  traditional  media  assist  in  the  government  —  the 
government's  efforts,  I  guess,  in  delegitimizing  WikiLeaks? 

A.  Absolutely.  I'd  say  there  were  three  distinct  components 
to  the  traditional  media  response.  One  was  primarily  typified  by  Fox 
News,  the  Weekly  Standard,  so  this  was  a  context  in  which  Bob  Beckel, 
who  had  been  Deputy  Assistant  Secretary  of  State  in  the  Carter 
Administration  speaks  on  Fox  News  and  says  of  Assange,  he's  a 
traitor,  he's  a  treason,  I  don't  believe  in  the  death  penalty. 

There's  only  one  solution,  illegally  shoot  the  son  of  a  bitch. 

Or  William  Kristol  in  the  Weekly  Standard  writes  that  the 
first  order  of  business  in  the  meeting  of  the  White  House  and  the 
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congressional  leadership  needs  to  be  how  to  destroy  --  degrade, 
destroy  WikiLeaks.  Describing  —  describing  the  organization  in 
these  terms.  Governor  Sarah  Palin  tweeted  that  Weekly  Standard 
report  and  said  of  Assange,  he's  an  anti-American  operative  with 
blood  on  his  hands.  Why  don't  we  deal  with  him  with  the  same  urgency 
that  we  deal  with  al-Qaeda  and  Taliban.  That  was  the  response  on 
that  side. 

The  New  York  Times  itself  continued  the  same  approach  that 
it  begun  to  develop  right  after  the  Iraq  logs.  Tom  Friedman, 
probably  the  best  known  op-ed  writer  of  the  New  York  Times  wrote  an 
op-ed  in  which  he  talked  about  there  being  two  major  threats  to  the 
world,  one  was  China  the  superpower,  and  the  other  was  super 
empowered  individuals  like  WikiLeaks,  and  compared  those  to  the  major 
threats  to  the  world.  New  York  Times  editor  Bill  Keller  published  an 
8000  word  New  York  Times  Magazine  description  of  the  events  in  which 
the  same  WikiLeaks  and  the  same  Assange  that  the  news  reporting  part 
of  the  organization  8  months  earlier  had  called  a  muck-raking  site,  a 
small  online  site  that  provides  information  that  governments  and 
corporations  would  like  to  be  —  would  like  to  keep  quiet,  suddenly 
started  to  describe  WikiLeaks  as  a  secretive  cartel  of  antisecrecy 
vigilantes.  He  described  Assange  in  terms  of  like  badly  smelling  as 
though  he  hasn't  bathed  in  months  and  repeatedly  tried  to  denigrate 
the  professionalism. 
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Finally,  there  was  similar  poor  reporting.  In  a  study  I 
did  of  all  of  the  stories  in  the  first  2  weeks  following  November 
28th,  over  half  the  news  stories  simply  falsely  reported  that 
WikiLeaks  had  dumped  thousands  or  250,000  cables  without  --  without 
any  redaction.  And  only  20  percent  of  stories  reported  accurately 
that  272,  not  250,000,  simply  272  cables  were  released.  They  were 
released  in  exactly  the  form  that  they  were  released  by  the 
traditional  media  organization  in  the  redacted  form  that  they  were 
released. 

So  this  combination  of  poor  reporting,  attack  by  the  New 
York  Times  and  very  vigorous  attack  on  the  right  wing  certainly 
resonated  with  the  initial  set  of  statements  from  more  government 
officials  to  completely  shift  the  view  of  WikiLeaks  from  what  it  had 
been  a  mere  8  months  earlier. 

Q.  Now,  I  want  to  end  by  asking  you  a  few  guestions  about  the 
Networked  Fourth  Estate. 

MJ:  Of  what? 

CDC [MR.  COOMBS]:  I'm  sorry  ma'am,  the  Networked  Fourth  Estate. 

Questions  continued  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  How  does  the  Networked  Fourth  Estate  differ  from 
traditional  media? 

A.  The  Networked  Fourth  Estate  differs  from  traditional  media 
along  similar  lines  to  which  we  see  software  development  or  video 
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differ  from  traditional  models.  That  is  to  say,  instead  of  having  a 
relatively  small  number  of  organizations  organize  around  relatively 
concentrated  capital  ownership,  in  the  mid-19th  Century  it  was  the 
major  presses,  later  on  it  was  the  recording  studios  and  the 
satellites  and  etcetera,  where  you  have  a  single  set  of  operators 
working  in  a  single  organization. 

What  you  see  now  is  a  much  diverse  set  of  actors.  You  do 
see  important  roles  for  some  traditional  media  like  the  Times , 
Guardian  and  BBC,  but  you  see  them  complemented  by  a  range  of 
different  other  organizations.  You  see  much  smaller  nonprofit  — 
much  smaller  for  profit  organizations  that  have  low  cost,  low  return, 
like  but  sustainable,  like  snopes.com  or  Tech  Dirt  that  are  either 
specific  to  an  area  or  specific  to  a  function.  You  see  non-profit 
organizations  like  the  Sun  Life  Foundation,  like  ProPublica,  like  the 
Bureau  of  Investigative  Journalism  who  work  on  a  non-profit  level 
like  WikiLeaks,  work  on  a  nonprofit  basis  and  are  able  to  contribute. 
You  see  academic  centers  producing  suddenly  something  that  instead  of 
being  only  academic  is  part  of  the  journalism.  So  factchecked.org  is 
an  example  of  that.  And  you  also  see  distributed  networks  of 
individuals  rising  at  certain  moments.  You  might  see  the  blog  of  an 
academic  economist  suddenly  becoming  a  very  important  source  of 
editorials  or  of  analysis.  You  might  see  the  blog  of  a  particular 
academic  or  particular  activist  suddenly  show  up. 
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1  So  it ' s  individuals,  non-profits,  academics,  small 

2  commercial  interacting  with  the  large  traditional  commercial 

3  organizations  that  today  create  this  new  model  of  network  journalism. 

4  Q.  How  has  the  traditional  media  historically  responded  to  the 

5  Networked  Fourth  Estate? 

6  A.  They  started  out  with  a  rather  dismissive  just  some  guy  in 

7  his  pajamas  kind  of  statements  about  a  decade  ago.  Then  I'd  say 

8  around  2009  there  was  panic,  this  thing  is  going  to  destroy  our 

9  industry,  where  it's  going  to  be  the  future  of  news.  I'd  say  today 

10  —  again,  this  follows  so  many  of  the  other  industries  that  have 

11  encountered  this. 

12  Today  there's  much  of  a  recognition  that  there  is  a  need  to 

13  incorporate  these  methods.  So  if  in  2006  the  only  photos  from  the 

14  London  underground  bombings  were  people  with  their  cellphones  and 

15  that  was  unique  and  new,  today,  after  the  Arab  Spring  where  the 

16  primary  source  of  video  for  street  protests  was  people  on  the 

17  streets,  you  see  the  BBC,  the  Guardian,  integrating  are  you  there, 

18  let  us  know.  Do  you  have  a  particular  experience?  Do  you  have 

19  particular  focus?  They're  beginning  to  integrate  these  distributed 

20  models  into  their  own  future  development.  The  same  way  that  software 

21  companies,  40  percent  now  actually  produced  open  source  software, 

22  there's  denial,  panic  and  then  incorporation  and  growth. 
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The  Columbia  School  of  Journalism,  the  leading  School  of 
Journalism,  in  the  U.S.  for  example  hired  Emily  Bell  who  had 
developed  the  Guardian's  online  framework,  which  is  largely 
considered  to  be  the  most  sophisticated  integration  to  actually  teach 
the  new  generation  of  journalists  what  everybody  understands  they 
need  to  know,  how  to  operate  in  this  new  environment. 

Q.  Is  WikiLeaks  a  member  of  the  Networked  Fourth  Estate? 

A.  Absolutely. 

Q.  Why  do  you  believe  that? 

A.  It  is  —  journalism  is  made  up  of  many  things.  WikiLeaks 
doesn't  do  interviews  and  pound  the  pavement.  Again,  when  we  say 
WikiLeaks,  we're  really  talking  about  before  the  severe  degradation 
that  followed  the  attack  on  the  organization  that  we  described  just 
before.  WikiLeaks  was  a  solution  to  a  very  particular  and  critical 
component  of  the  way  in  which  investigative  journalism,  muck-raking 
confined  instances  of  corruption.  It's  --  we  don't  only  live  from 
Pentagon  papers  or  Watergate  or  the  NSA  wire  tapping  scandals  of  2005 
and  the  more  recent  months.  But  it's  a  clear,  distinct  component  of 
what  in  the  history  of  journalism  we  see  as  high  points,  where 
journalists  were  able  to  come  in  and  say,  here's  a  system  operating 
in  a  way  that  is  obscure  to  the  public  and  now  we're  able  to  shine 
the  light. 
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That's  what  WikiLeaks  showed  how  to  do  for  the  network 
public  sphere.  WikiLeaks  may  fail  in  the  future  because  of  all  these 
events,  but  the  model  of  having  some  form  of  decentralized  leaking, 
that  is  secure  technologically  and  allows  for  collaboration  among 
different  media  and  different  countries,  that's  going  to  survive  and 
somebody  else  will  build  it.  But  WikiLeaks  played  that  critical  role 
of  that  particular  critical  component  of  what  muck-raking  and 
investigative  journalism  has  always  done. 

CDC [MR.  COOMBS]:  Thank  you.  Professor  Benkler. 

No  further  questions. 

MJ:  Cross-examination? 

ATCtCPT  MORROW]:  Yes,  Your  Honor,  I'd  like  to  go  for  a  little 

bit  and  potentially  break  for  lunch  at  that  point.  Consider  some 
other  things  that  we  may  want  to  show  Professor  Benkler  and  come  back 
after  that. 

MJ:  Any  objection  to  that? 

CDC [MR.  COOMBS]:  No  objection.  Your  Honor. 

MJ:  Go  ahead. 

CROSS-EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Professor  Benkler,  I'd  like  to  start  by  sort  of  talking 
about  your  research  methodology. 

A.  Yes. 
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Q.  Now,  you  became  interested  in  the  topic  of  WikiLeaks 
sometime  in  April  2010;  is  that  correct? 

A.  Yes. 

Q.  And  that  was  because  of  the  Apache  video  release? 

A.  Yes. 

Q.  Now,  your  research  methodology  was  essentially  to  collate 
everything  that  had  ever  been  written  on  the  subject  of  WikiLeaks, 
right? 

A.  That  was  the  ambition. 

Q.  That  was  the  ambition.  What  was  your  research  methodology? 

A.  I  tried  to  pull  together  what  I  could  find  that  had  been 
written  publicly  in  traditional  media  as  well  as  online  as  well  as 
well  prior  instances  of  the  WikiLeaks  site  itself. 

Q.  So  you  looked  at  online  news  sources? 

A.  Yes. 

Q.  You  looked  at  traditional  news  sources? 

A.  Yes. 

Q.  You  used  the  internet  archives  specifically  to  look  at  how 
WikiLeaks  looked  at  particular  periods;  is  that  right? 

A.  I  did. 

Q.  And  you  didn't  think  necessarily  that  the  internet  archived 
information  was  particularly  helpful,  to  your  analysis? 
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A.  Mostly  what  it  showed  me  that  there  was  no  major  change  and 
that  the  origin  story  was  very  similar  to  the  way  that  it  had  been 
initially. 

Q.  And  so  once  you  sort  of  had  gotten  all  these  articles  and 
sources  together,  you  did  almost  all  of  the  reading  yourself? 

A.  Yes. 

Q.  And  you  did  all  of  the  writing  for  this  paper? 

A.  Yes. 

Q.  But  you  had  research  assistants  essentially  do  the 
collecting  for  you? 

A.  Yes. 

Q.  And  you  were  interested  in  how  WikiLeaks  was  viewed  prior 
to  the  leaks  related  to  this  case? 

A.  Yes. 

Q.  And  you  were  interested  in  how  they  were  viewed  after  the 
leaks  related  to  this  case? 

A.  Yes. 

Q.  And  so  you  read  practically  every  article  on  WikiLeaks  you 
could  find  from  2007  to  March  of  2010.  That  is  one  block  of  your 
analysis  or  one  block  of  your  research;  is  that  correct? 

A.  Yes. 

Q.  As  you  were  reading,  you  would  mark  instances  where  you  saw 
sort  of  a  good  or  bad  reference? 
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1  A.  Yes. 

2  Q.  And  can  you  describe  that  process,  please? 

3  A.  I  read  the  materials.  When  I  identified  things  that  were 

4  particularly  critical,  I  would  mark  them;  when  I  identified  things 

5  that  were  particularly  relevant,  or  really  more  than  a  passing 

6  reference  I  would  mark  them;  when  I  would  identify  things  that  were 

7  particularly  positive  I  would  mark  them  so  that  I  could  come  back  and 

8  report  on  them.  Then  as  I  wrote  I  went  back  and  forth  between  the 

9  materials  and  my  notes. 

10  Q.  In  some  of  these  earlier  articles  you  were  looking  at,  I 

11  believe  you  said  valence,  tone  and  content? 

12  MJ:  What  was  that? 

13  ATC [CPT  MORROW]:  Valence,  tone  and  content. 

14  Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

15  A.  Valence,  were  they  positive  or  negative  tone,  in  terms  of 

16  their  general  view  and  the  particular  contents.  What  they  were 

17  describing.  Yes. 

18  MJ:  What  is  valence? 

19  WIT:  Whether  they  are  positive  are  negative. 

20  M J:  Keep  going,  I'm  sorry. 

21  ATC [CPT  MORROW]:  It's  a  chemistry  term,  I  believe;  is  that 

22  correct? 

23  WIT:  Apparently. 
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Q.  Anyway,  keep  going.  I'm  sorry. 

A.  That  was  it. 

Q.  This  was  actually  reporting  mostly  about  WikiLeaks;  is  that 
correct? 

A.  I  was  looking  primarily  for  reporting  about  WikiLeaks  and 
when  WikiLeaks  had  —  I  was  trying  to  understand  what  WikiLeaks  had 
actually  found.  I  was  trying  to  understand  how  it  was  described  but 
also  what  were  the  stories  that  were  not  simply  on  the  side  but 
actually  moved  the  needle  in  the  public  reporting,  so  both  of  those. 
That's  the  content  part. 

Q.  And  you  had  practically  every  single  article  on  WikiLeaks 
post  March  2010  as  well;  is  that  correct? 

A.  I'd  say  I  had  a  very  strong  emphasis  on  materials,  a  very 
discrete  strong  emphasis  on  materials  after  the  Embassy  cables  but  I 
also  read  the  articles  in  between,  yes. 

Q.  And  again,  it  was  sort  of  the  same  methodology,  you  would 
read  an  article,  look  at  the  tone  and  content  and  then  or  look  at 
whether  it's  a  good  or  bad  reference,  make  highlights,  make  notes  and 
look  at  the  tone  and  content;  is  that  correct? 

A.  That  was  the  general  —  that  was  the  general  method,  yes. 
Specifically  for  the  study  right  after  —  for  the  2  weeks  right  after 
I  actually  sorted  them  into  accurate,  inaccurate  and  vague  in  order 
to  be  able  to  make  the  statement  or  in  order  to  be  able  to  find  out 
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how  many  or  what  proportion  of  the  stories  that  mentioned  some  number 
of  cables  correctly  described  the  272  cables  as  opposed  to  said 
thousands  or  250,000. 

Q.  How  did  you  determine  whether  something  was  accurate  or 
inaccurate? 

A.  For  that  particular  period? 

Q.  Yeah. 

A.  There  was  a  fact.  There  was  a  fact,  272.  Then  there  were 
several  more  and  then  there  was  several  more  and  then  there  was 
thousands  as  opposed  to  250,000.  I  made  the  judgment  of  what  I  knew 
to  be  the  state  of  the  world  and  I  compared  it  to  what  was  reported. 

Q.  So  that  was  that  period? 

A.  Yes. 

Q.  What  about  the  period  between  March  and  November  of  2010? 
Same - 

A.  I  did  not  make  the  same  sorting  about  what  was  accurate  and 
what  was  not.  And  I  made  the  best  judgment  again,  less  formally 
structured.  But  —  because  —  some  things  are  easy:  272  is  not 
250,000.  Some  things  are  harder  and  more  textured.  So  I  made  the 
judgment  based  on  my  best  understanding  of  everything  I  read  about 
WikiLeaks,  about  how  consistent  what  I  read  was  with  what  I  had  known 
from  the  prior  materials. 
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Q.  During  your  research  and  writing,  I  believe  you  said 
yesterday  that  this  wasn't  really  quantitative  analysis;  is  that 
correct? 

A.  Yes.  Sometimes  you  can  try  to  do  quantitative  analysis 
with  content.  Sometimes  it's  harder  because  you're  looking  for  more 
qualitative  understanding  and  it's  very  hard  and  inaccurate 
essentially.  You  pretend  to  have  data  but,  in  fact,  it  turns  out  to 
be  inaccurate  when  you're  trying  to  quantify  things  that  are  more  of 
one's  best  understanding.  At  which  point  what  you  try  to  do  is  you 
have  a  single  researcher  read  through  and  form  a  consistent  opinion 
of  that  one  researcher. 

Q.  And  would  you  say  that  at  least  in  your  field  sometimes 
people  do  quantitative  analysis? 

A.  Absolutely.  I  do,  too. 

Q.  Okay.  As  you  were  reviewing,  you  were  writing  on  the 
articles  and  sort  of  setting  them  aside  and  sort  of  categorizing  them 
again,  tone,  content,  that  sort  of  thing? 

A.  Yes. 

Q.  Had  you  employed  this  specific  research  methodology  in  the 

past? 

A.  To  specific  —  to  specific  case  studies,  yes.  So,  for 
example,  I  reported  in  a  chapter  of  Wealth  and  Networks  on  —  as  I 
was  trying  to  explain  how  the  blogosphere  of  queries,  questions,  I 
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did  a  similar  study  of  critique  of  Diebold  machines  that  were  voting 
machines  that  were  questioned  in  the  2002  election.  I  did  the 
similar  —  so  yes,  I  have  in  the  past  tried  to  do  case  studies  as 
particularly  richly  detailed. 

There's  always  a  tradeoff  between  what  you  can  identify  in 
very  precise  quantitative  terms  that  are  usually  very  thin  and  don't 
give  you  the  texture  of  the  event  and  what  you  can  do  with  textures, 
qualitative  analysis.  And  I  tried  to  use  both  methods  for  wherever 
they  are  most  useable. 

Q.  As  part  of  your  research,  you  didn't  view  any  videos  of 
Julian  Assange  or  any  other  WikiLeaks  individuals  in  the  course  of 
your  research? 

A.  I  didn't  really  look  for  videos  of  Assange  or  others  as  a 
particular  source,  no. 

Q.  Sometime  in  February  2011,  I  believe  you  posted  your 
article  on  your  personal  website,  right? 

A.  I  did. 

Q.  And  that's  sort  of  a  normal  process? 

A.  It's  certainly  normal  for  me.  I've  been  publishing  my  work 
openly  since  the  late  '90s.  To  me  it's  an  important  way  of  getting 
feedback  from  people  who  I  don't  happen  to  know  on  what  is  right  and 
wrong  about  what  I  do. 

Q.  Then  the  summer  of  2011  it  was  published? 
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A.  Yes. 

Q.  And  you  said  earlier  that  prior  to  its  formal  publication 
you  received  an  e-mail  from  Julian  Assange;  is  that  correct? 

A.  Yes. 

Q.  And  that  e-mail  had  your  article  as  an  attachment  to  the  e¬ 


mail? 

A.  I  believe  that's  what  it  was.  That  it  was  an  attachment 
with  annotations  to  the  documents.  I  didn't  go  back  to  look  to  see 
whether  it  was  that  or  two  documents  side-by-side. 

Q.  But  in  any  event,  Mr.  Assange  provided  you  comments  to  your 
article? 


A.  Yes. 

Q.  And  he  provided  his  perspective  on  several  events? 

A.  Yes. 

Q.  And  he  provided  you  additional  information  that  at  that 
point  you  had  not  looked  at? 

A.  Yes. 

Q.  And  you  cited  Mr.  Assange's  annotations  in  your  article? 

A.  Yes,  I  did. 

Q.  But  not  for  any  facts  necessarily? 

A.  I  didn't  cite  them  for  the  truth  of  their  content.  If  I 
was  citing  something  for  the  truth  of  its  content,  I  cited  it 
specifically  as  this  is  the  view  asserted  by  Mr.  Assange  in  the 
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annotations.  If  the  question  was,  did  you  —  here's  a  mistake  in 
fact  of  what  you  have,  I  went  back  and  did  the  research  for  myself 
and  formed  my  own  opinion  on  these  particular  facts.  There  is  no 
point  that  I  simply  took  the  assertion  of  fact  without  noting  it's  an 
assertion  of  fact  from  this. 

Q.  So  his  comments  did  make  you  go  back  and  do  additional 
research? 

A.  Yes. 

Q.  Or  look  at  the  research? 

A.  Yes. 

Q.  Now,  when  you  were  conducting  the  research  on  the  news 
media  accounts  of  WikiLeaks,  you  did  not  really  consider  the  news 
outlet  itself;  is  that  correct?  You  weren't  trying  to  assign  value 
to  the  news  outlet? 

A.  It  depends  for  what.  I'd  say  that  if  what  I  was  trying  to 
do  was  understand  whether  a  particular  revelation  had  been  discussed, 
I  ignored  the  particular  source.  If  what  I  was  trying  to  understand 
was  the  relative  likely  truth  value,  I  provided  some  weight  to  the 
quality  that  I  believe  the  news  site  to  have  but  it  depended  on  the 
context . 

Q.  So  you  looked  at  the  quality  of  the  assertion  in  some 
cases? 

A.  Yes. 
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Q.  Would  you  agree  that  the  tone  and  content  was  more 
important  to  your  research  than  who  exactly  was  saying?  So  the  tone 
and  content  and  the  quality  of  the  assertion  is  more  important  than 
who  actually  was  saying  it? 

A.  It  was  a  mix  I  would  say  of  both.  They  informed  each 
other.  I  certainly  cared  a  lot  of  the  tone  and  particularly  the 
content  to  try  to  understand  what  was  the  unfolding  of  the  events. 
But  I  couldn't  ignore  completely  the  quality  of  the  publication. 

Q.  Your  conclusion  is  that  sort  of  pre-Manning,  so  early  2007 
to  2010,  WikiLeaks  was  generally  a  somewhat  responsible  news 
organization? 

A.  As  I  said,  I  think  there  was  a  lot  of  concern  and 
speculation  early  on.  I  think  there  was  an  increasing  degree  of 
comfort  with  the  message  of  the  organization  over  the  course  of  2008 
and  I'd  say  that  from  the  Julius  Baer  affair  in  early  2008,  and 
increasingly  so,  over  the  course  of  2009,  the  tenor  of  the  articles, 
not  obviously  uniform,  but  the  tenor  of  the  articles  was  one  that 
increasingly  saw  WikiLeaks  as  a  major  new  player  in  the  new 
journalism,  yes. 

Q.  Over  the  course  of  2010,  you  talked  about  this  with  Mr. 
Coombs,  WikiLeaks  became  more  integrated  with  traditional  news  media 

A.  Yes,  they  did.  Not  always  easily. 
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Q.  Not  always  easily,  but  it  happened  and  on  several  releases 
there  was  some  kind  of  integration? 

A.  Yes. 

Q.  But  at  least  in  your  article,  eventually  your  conclusion  is 
that  the  government's  reaction  to  WikiLeaks  was  sort  of  overwrought? 

A.  Yes,  well,  overwrought  was  the  term  that  Secretary  Gates 
used  for  it  and  I  thought  it  was  a  remarkably  well  placed  assessment. 

Q.  Yes.  And  I'm  referring  mainly  there  to  the  reaction  of  the 
release  of  the  Afghan  database,  the  Iraq  database  and  the  Department 
of  State  cables? 

A.  Yes. 

Q.  And  you  thought  this  overwrought  reaction,  how  Secretary 
Gates  said  it,  was  more  likely  than  some  of  the  other  public 
statements  made  by  various  officials? 

A.  Yeah. 

Q.  You've  assigned  a  value  to  that  statement  versus  other 
statements? 

A.  Yes.  I  have  spent  a  significant  amount  of  time  reading  up 
on  this  organization.  I  had  formed  a  certain  view  based  on  the 
reading  that  I  described  to  you  earlier.  And  then  I  met  these 
assertions  of  high  tech  terrorists,  terrorist  organizations,  they 
were  simply  incongruous  with  everything  I  had  done  in  my  research  and 
seen  this  organization.  There  was  a  deep  discontinuity  and 
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incongruity  between  what  I  knew  to  be  the  case,  at  least  based  on  my 
research  to  that  point,  and  these  public  assertions  that,  yes,  I 
would  say  that  I  assigned  a  truth  value  higher  to  the  report  that 
said  it  was  overwrought  to  say  of  Assange  that  he's  a  high  tech 
terrorist  than  to  statements  that  actually  made  those  assertions. 

Q.  And  your  assigning  a  value,  at  least  in  that  particular 
case,  was  based  in  part  on  Secretary  Gates'  position.  He  was  the 
Secretary  of  Defense  at  the  time,  right? 

A.  I  made  that  assessment  based  on  my  reading  of  the  history 
of  WikiLeaks,  my  own  judgment  based  on  my  own  research  and  the 
incongruity.  I  cited  Secretary  Gates  because  I  thought  it  was 
important  to  see  that  even  someone  within  the  administration  who  had 
responsibility  over  this  area,  could  see  how  implausible  the  response 
was.  It  was  for  that  aspect,  the  fact  that  you  didn't  need  to  be  an 
outsider,  you  could  actually  sit  on  the  inside  and  still  see  that  the 
response  was  an  implausible  response.  But  the  foundation  for  my 
judgment  was  my  own  research  and  understanding  based  on  my  own  deep 
knowledge  of  how  the  organization  had  been  seen  a  mere  few  months 
earlier. 

Q.  Right.  But  in  large  part.  Secretary  Gates'  position  or  at 
least  his  description  of  the  reactions  being  sort  of  overwrought, 
your  value,  assigning  of  a  value  to  sort  of  that  position  was  based 
in  some  part  on  some  of  the  other  news  articles  that  you  read  where 
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there  were  people  that  were  unnamed  sources  that  also  sort  of 
confirmed  what  Secretary  Gates  says;  is  that  correct? 

A.  The  unnamed  source  is  a  little  bit  different.  This  here  I 
referred  to  Secretary  —  so  there  are  two  statements  of  Secretary 
Gates  they  cite. 

The  first  one  is  in  a  press  conference  with  regard  to  the 
response,  with  regard  to  the  Embassy  cables  being  overwrought.  The 
claim  that  embarrassing  and  uncomfortable,  sure,  but  damaging  to 
foreign  policy,  not  likely.  That  was  with  regard  to  the  Embassy 
cables . 

There's  another  reference  I  make  which  I  do  assign  more  to 
Secretary  Gates'  judgment  than  to  others  because  it  was  in  a  formal 
letter  in  response  to  a  formal  request  for  assessment  from  a  relevant 
Senatorial  oversight  committee  and  that  I  take  to  be  a  public 
document  and  that's  why  I  give  that  higher  support.  Secretary  Gates 
in  the  context  not  of  press  release  and  managing  public  perception 
but  in  the  context  of  a  formal  response  to  a  formal  request  to  the 
relevant  oversight  committee  makes  the  claim.  That  I  give  its  own 
truth  value  on  that  institutional  basis. 

Q.  Now,  one  of  the  other  facts  you  cite  in  your  article  in 
support  of  your  assertion  that  the  government  reaction  was  sort  of  an 
overreaction,  was  the  fact  that  PFC  Manning,  at  the  time  of  the 
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article,  in  your  opinion,  had  been  held  in  solitary  confinement  for  8 
months;  is  that  correct? 

A.  That  was  one  of  the  issues  that  I  referred  to  in  that 
article,  yes. 

Q.  And  you  actually  referred  to  it  in  several  places  in  the 
article? 

A.  I  did. 

Q.  You  said  that  as  of  that  writing  Manning  had  been  in 
solitary  confinement  for  over  8  months,  denied  pillows  and  sheets  and 
locked  in  a  cell  for  23  hours  a  day? 

A.  That  was  the  information  as  then  available  in  public  open 
media  that  were  available  to  me,  yes. 

Q.  And  that,  again,  that  was  derived  from  news  sources? 

A.  Yes. 

Q.  As  well  as  Mr.  Coombs'  blog.  I  believe  you  cited  Mr. 
Coombs'  blog  in  your  article  as  well? 

A.  Yes,  I  did. 

Q.  And  that  was  because  —  that  fact  was  basically  the  fact 
that  was  sort  of  the  primary  public  source  reporting  on  the 
conditions  of  his  confinement,  right? 

A.  Precisely. 
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Q.  And  then  you  stated  that  the  treatment  seemed  consistent 
with  the  Pentagon  report's  emphasis  on  the  deterrence  against 
potential  sources  of  leaks  as  a  core  tactic  to  undermine  WikiLeaks? 

A.  Yes,  I  did.  If  you  look  at  the  ACIC  report,  it  basically 
seems  to  come  to  a  conclusion  that  it's  very  hard  to  suppress 
information  once  it's  on  WikiLeaks,  and  that  the  core  target  needs  to 
be  on  trust  as  the  center  of  gravity.  In  other  words,  to  undermine 
the  concept  that  WikiLeaks  is  a  place  where  a  leaker  can  go  and  trust 
that  they  won't  be  revealed.  So  in  order  to  prevent  this  distributed 
leaking,  it's  necessary  to  increase  the  fear,  at  it  were,  or  the 
constraint  on  potential  leakers.  A  judgment  I  made  at  the  time  based 
on  the  public  reports  of  PFC  Manning's  treatment  and  my  understanding 
of  the,  one  of  those  key  judgments  of  the  report  was  that  treating 
PFC  Manning  very  badly  was  —  would  be  consistent  with  the  goal  of 
deterring  future  whistleblowers. 

Q.  That's  not  necessarily  your  judgment  today,  but  it  was  your 
judgment  at  the  time  based  on  what  was  available  to  you  in  open 
source? 

A.  This  is  what  you  asked  me  now. 

Q.  Now,  Professor  Benkler,  you've  never  met  anyone  who  was  a 
volunteer  for  WikiLeaks  or  an  employee  with  WikiLeaks;  is  that 
correct? 

A.  You  mean  as  a  formal  interview? 
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Q.  Formal  interview  as  part  of  your  article  research? 

A.  No,  no. 

Q.  And  you  were  never  an  adviser  to  WikiLeaks  formally  or 
informally? 

A.  No. 

Q.  And  you've  never  been  a  volunteer  for  WikiLeaks  either  now 
or  before,  prior  to  your  time  as  a  - 


Q.  Just  generally,  you  were  never  really  a  party  to  any  of  the 
accounts  cited  by  news  organizations  in  response  to  the  leaks? 

A.  I'm  not  sure  I  understand  that  question. 

Q.  You  weren't  there  - 

A.  I'm  not  an  actor.  I'm  an  observer. 

Q.  Right. 

A.  I'm  an  academic  observer,  not  an  actor  in  these  events. 

Q.  Okay.  Now,  when  you  were  writing  the  article,  and  I  think 

you  already  said  this,  but  you  didn't  seek  interviews  with  others  who 
may  have  dealt  with  WikiLeaks  or  Julian  Assange? 

A.  No,  I  didn't. 

Q.  You  didn't  speak  with  the  editors  at  the  New  York  Times  or 
the  Guardian  or  Der  Spiegel  or  anywhere  else? 

A.  No,  I  did  not. 

Q.  And  why  not? 
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A.  Different  methods  of  research  in  different  modes.  There 
are  certainly  academic  disciplines  that  work  very  heavily  with 
interviews,  be  they  sociology  or  anthropology.  I  have  in  the  past, 
here  and  there,  used  interviews.  But  here  I  was  really  concerned 
with  the  public  record,  with  what  was  available  to  anyone  who  would 
spend  the  time  and  effort  to  do  it.  So  that's  what  I  decided  to  do. 
And  this  is  not  uncommon.  Perhaps  it's  uncommon  in  journalism,  but 
it's  not  uncommon  in  academic  exercises  of  trying  to  look  at  things 
as  they  exist  in  the  public  record  rather  than  trying  to  do  a  more 
journalistic  analysis  that  would  involve  interviews. 

Q.  Now,  you  said  just  sort  of  towards  the  end  that  in  your 
opinion,  at  least,  that  there  have  been  some  —  I'll  quote  you,  some 
very  poor  reporting  in  this  case? 

A.  Yes. 

Q.  Is  that  correct? 

A.  I  referred  to  the  repeated  references  to  250,000  cables 
being  dumped  by  WikiLeaks  at  the  time  in  which  it  was  272  cables  that 
were  redacted  and  released  in  coordination  with  the  traditional  media 
organization. 

Q.  So  that  comment  specifically  just  recently,  the  very  poor 
reporting,  that's  mainly  referring  to  that  analysis  you  did  in 
November  2010,  related  to  - 

A.  That  was  primarily,  primarily  to  that,  yes. 
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Q.  Now,  do  you  believe  —  did  you  see,  at  least  in  your 
overview  of  the  other  time  periods,  so  March  2010  to  November  or  even 
prior  to  March  2010,  did  you  see  what  struck  you  as  poor  reporting  in 
those  times  as  well? 

A.  Yes.  They  were  all  —  there's  high  variability  and  quality 
of  reporting  throughout  the  period. 

Q.  Now,  if  your  conclusions  are  based  in  large  part  on  what 
you've  now  acknowledged  as  sort  of  poor  reporting  in  some  places, 
does  that  —  did  you  pause  to  sort  of  consider  your  conclusion 
entirely? 

A.  No,  not  at  all.  This  is  what  you  do  as  somebody  who  is  a 
researcher.  You  assess  different  documents.  You  cross-reference  the 
various  perspectives,  you  form  a  judgment  about  what  happened  and 
then  you  form  a  second  judgment  about  which  sources  you  trust  and 
which  you  don't.  It's  not  even  always  a  particular,  a  particular 
organization  that  would  be  more  or  less  trustworthy.  I  cite  in  the 
article  a  context  in  which  on  the  same  day  the  same  newspaper  has 
three  different  articles  on  the  embassy  cable  release.  In  one  it 
states  the  obviously  false  statement  of  250,000  unredacted.  In  one 
it  states  the  obviously  correct  statement  of  272,  in  a  different 
story  on  the  same  day.  And  in  a  third  it  says,  began  to  release 
thousands.  So  there's  no  magic  bullet  of  if  it's  the  New  York  Times , 
it's  always  correct  and  if  it's  some  other  place  it's  not.  You  have 
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to  be  able  to  cross-reference  multiple  materials,  make  assessments 
and  come  to  a  judgment.  That's  what  I  do. 

Q.  I  want  to  talk  about  sort  of  your  experience  generally  with 
the  journalism  and  Networked  Fourth  Estate.  Let  me  find  --  give  me 
one  second,  sir. 

Now,  in  your  experience,  do  journalists  encourage  anonymity 
with  their  sources?  What  I  mean  by  that  is,  they  try  to  protect 
their  sources  from  others,  but  do  they  encourage  the  source  to  keep 
anonymity  with  them? 

A.  It  depends  on  the  context.  Generally  speaking,  they  want 
to  know  the  source  but  it  depends  on  the  context.  If  you're  talking 
about  a  Deep  Throat,  not  necessarily. 

Q.  But  in  terms  of  authentication  procedures,  one  of  the  ways 
that  you  actually  do  that  is  by  ensuring  that  you  know  who's  giving 
you  materials,  right? 

A.  That  is  certainly  one  possible  method  of  authentication. 
Getting  particular  bits  of  information  that  could  only  be  known  by  an 
authentic  source  and  then  cross-referencing  would  be  another.  There 
are  different  methods  of  authentication.  Whether  it's  in  journalism 
or  whether  it's  in  computer  security,  it  doesn't  matter.  There  are 
simply  different  methods  of  authentication.  Identity  of  the  source 
is  one.  Possession  of  a  verifiable  piece  of  information  that  is 
associated  with  certain  knowledge  might  be  another. 
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Q.  Now,  you  spoke  earlier  about  sort  of  the  early  part  of 
WikiLeaks,  '07  to  '08,  '09  timeframe  and  you  talked  about  how  there 

was  no  question  about  the  authenticity  of  materials  posted  by 
WikiLeaks.  Now,  do  you  have  any  direct  knowledge  of  WikiLeaks' 
authentication  procedures  at  any  time? 

A.  No,  I  don't.  What  I  was  referring  to  was  the  truly 
remarkable  —  WikiLeaks  was  an  organization  for  which  there  were 
plenty  of  people  who  worried  about  the  authenticity  and  who  would 
have  been  perfectly  happy  to  publish  instances  where  WikiLeaks  had  to 
retract.  What  was  remarkable  and  in  that  regard  just  as  a  pure  fact, 
not  anything  you  could  manipulate,  what  was  remarkable  was  that 
through  dozens  of  publicly  reported  releases,  thousands  of  releases, 
there  were  no  significant  reports  of  WikiLeaks  having  to  retract  and 
say,  oops,  this  wasn't  authentic,  we  got  hacked.  Dan  Rather,  I'm 
sure,  would  have  loved  to  be  able  to  say  the  same  thing  for  himself. 

Q.  Now,  have  you  ever  seen  —  in  your  experience  with 
journalism  or  otherwise,  have  you  ever  seen  a  journalist  tell  a 
source,  "Lie  to  me?" 

A.  Not  that  I  know  of. 

Q.  And  we  talked  —  I  asked  you  a  number  of  questions 
yesterday.  I  kind  of  want  to  go  through  those  now.  You  would  agree 
that  there's  a  difference  between  a  transparency  movement  and  a 
journalistic  enterprise? 
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A.  Yes. 

Q.  A  transparency  movement  seeks  institutional  change? 

A.  I  think  in  general  transparency  movement  —  any  movement 
would  be  defined  by  the  functions  that  it  fulfills.  And  if  its  goal 
is  to  achieve  institutional  or  social  change,  then  I  would  call  it  a 
movement  not  an  act  of  journalism.  But  these  two  are  not  mutually 
exclusive.  You  can  have  the  same  organization  commit  acts  of 
journalism  or  acts  of  movement  building  and  movement  participation. 
The  two  are  not  —  they're  different,  they're  not  mutually  exclusive. 

Q.  Along  the  same  lines,  you  would  agree  there's  a  difference 

between  a  group  of  freedom  of  information  activists  and  a 
journalistic  activist? 

A.  Yes,  I  would. 

Q.  And  you'd  agree  there's  a  difference  between  activism  and 
journalism? 

A.  I  think  there's  a  difference  between  activism  and 
journalism.  Although  again,  there  are  activists  who  also  perform 
journalism,  and  when  they  perform  journalism  they're  doing 
journalism.  There  are  journalists  who  also  perform  activism.  When 
they're  doing  that,  they're  organization.  It's  not  a  unique 
organization  or  individual  identity.  It's  a  behavior. 

Q.  How  do  you  determine  when  an  organization  is  performing 
activism  over  performing  journalism? 
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A.  I  would  define  journalism  as  the  gathering  of  news  and 
information  relevant  to  public  concern  for  purposes  of  its 
dissemination  to  the  public.  When  I  observe  an  organization  doing 
that,  I  would  say  it's  engaged  in  journalism.  When  I  say  the  effort 
to  actually  change  an  institution,  I  would  say  they're  engaged  in 
activism. 

Q.  So  that's  an  interesting  question  I  think  we  sort  of  talked 
about,  we'll  talk  about  a  little  later.  But  at  least  with  your 
research  and  generally  speaking,  you  would  agree  that  sort  of  actions 
are  more  important  than  what  someone  says  about  themselves,  right? 

A.  Yes. 

Q.  Sort  of  trying  to  evaluate  what  somebody  is  doing,  you  want 
to  look  at  actions,  not  what  they're  saying? 

A.  I  think  that  looking  at  what  an  organization  does  is  a  more 
crisp  indication  of  how  I  would  define  it  than  what  it  says  about 
itself.  I  think  if  you're  trying  to  understand  a  way  in  which  an 
organization  understands  itself,  then  you  want  to  see  what  it  says. 
But  I'm  very  heavily  focused  on  --  this  was  why  I  said  I  looked  at 
the  content  of  the  stories. 

Q.  Right. 

A.  To  try  to  understand  what  the  actual  behaviors  were. 
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Q.  Now,  would  you  also  agree  that  there's  a  difference  between 
the  ideals  of  a  journalist  and  the  ideals  of  someone  seeking  maximum 
political  impact? 

A.  Not  necessarily.  Not  necessarily.  I  think  journalism  has 
a  broad  range.  There  is  a  relatively  narrow  idea  of  more  classical 
journalism.  It's  not  really  classical,  it's  mid-20th  Century, 
journalism  that's  very  focused  on  just  being  a  professional.  But 
there's  certainly  politically  oriented  journalism.  You  can  talk 
about  - 

Q.  Would  that  be  like  muck-raking  journalism? 

A.  Partly  muck-raking  journalism.  For  example,  if  you  look  at 
something  like  The  Nation,  there's  a  particular  view  of  the  world,  a 
particular  political  world  view  and  reporting  that's  oriented  toward 
that.  It's  not  you  select  anything  you  want.  You  select  things,  not 
simply  because  they're  interesting  but  because  they  are  relevant  to 
action  in  a  particular  political  perspective.  It  doesn't  make  it  not 
journalism.  It  makes  it  a  certain  kind  of  journalism,  mobilized 
j  ournalism. 

Q.  The  idea  is  to  select  things  that  are  newsworthy  when 
you're  a  journalist? 

A.  No.  That's  what  I'm  resisting. 

Q.  Okay. 
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A.  I'm  saying  there  are  diverse  forms  of  journalism  and  all 
the  news  that's  fit  to  print  is  one  model.  And  it  claims  for  itself 
a  complete  political  neutrality.  But  I  don't  think  that  an 
organization  like  The  Nation  or  an  organization  like  Fox  News  doesn't 
take  political  impact  of  the  reporting  into  consideration  of  what  to 
report  on,  how  to  report  and  which  facts  to  underline.  I  wouldn't 
call  The  Nation  or  Fox  News  not  journalism  simply  because  they  don't 
only  do  all  the  news  that's  fit  to  print. 

Q.  Now,  would  you  agree  that  mass  document  leaking  is  somewhat 
inconsistent  with  journalism? 

A.  No.  Why  would  I  agree  with  that? 

Q.  If  there  was  no  newsworthy  news  locus  or  nexus  there? 

A.  If  it  had  no  news  and  wasn't  relevant  I  might  agree  but  the 

very  fact,  it  depends  on  what  the  —  it  depends  on  what  you're 
looking  for.  I'll  give  you  an  example.  The  most  significant 
investigative  body  looking  at  civilian  casualties  in  the  Iraq  war, 
Iraq  body  count,  took  the  Iraq  SIGACTS  and  did  a  exposed  analysis 
quantitatively  and  showed  that  actually  from  documents  held  by  the 
government  there  was  an  incongruity  between  the  number  of  civilian 
casualties  reported  by  the  government  in  Iraq  and  the  actual  number 
known  to  the  government  from  these  documents.  You  can't  do  that  with 
one  smoking  gun  document.  The  only  way  you  can  do  that  is  by  mass 
analysis  of  lots  of  documents.  So  it  really  depends  on  the 


10299 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


o 


9 


particular  form  of  journalism  and  the  particular  form  of  question, 
whether  what  you  need  is  cross-referencing  of  a  very  large  number  of 
documents,  each  of  which  may  not  by  itself  make  the  particular  point, 
but  all  of  which  together  make  an  incredibly  important  point. 

Q.  Well,  I'm  glad  you  brought  that  up  because  you  actually 
cite  that  in  your  paper,  right,  as  one  of  the  noteworthy  aspects  of 
the  publication  of  the  Iraq  war  logs  was  this  incongruity  between 
what  had  been  recorded  and  what  was  in  the  logs  themselves?  So  let's 
talk  about  that.  Are  you  aware  that  the  significant  activity  reports 
are  usually  written  almost  contemporaneously  with  an  event? 

A.  No,  I  wasn't  aware  of  that.  But  broadly  speaking,  yes. 

Q.  So  I  want  to  go  through  sort  of  an  example,  now,  if  that  is 
true.  Let's  take  reporting  on  other  sort  of  events  that,  where 
there's  sort  of  casualties,  et  cetera.  Let's  talk  about  the  Boston 
Marathon  bomber.  Now,  you  would  agree  that  at  least  initially  there 
were - 

MJ:  Yes? 

CDC [MR.  COOMBS]:  Your  Honor,  relevance  at  this  point?  I 

don't  know  if  this  is  going  to  be  another  baseball  card  thing.  But  I 
would  say  relevance  to  going  down  the  comparison  to  something  totally 
unrelated  to  this  case  and  also  just  an  idea  of  how  much  longer  the 
government  tends  to  go  because  it  might  be  a  good  time  for  a  break. 
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ATC [CPT  MORROW]:  A  couple  more  questions  and  we  can  break. 

Where  I'm  going  with  this  is  the  sort  of  the  wild  variations  in 
what's  initially  reported  about  casualties  that  aren't  necessarily 
related  to  ill  intent  or  anything  else. 

MJ:  All  right.  I  gave  you  some  latitude.  I'll  give  you  some 

latitude  as  well.  Go  ahead. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  So  you  would  agree  that  at  least  there  were  sort  of  wild 
variations  after  the  incident  in  terms  of  number  of  casualties  and 
deaths? 

A.  I  live  in  Boston.  That's  my  recollection,  too.  But  I 
can't  tell  you  that  I  did  it  as  a  matter  of  research. 

Q.  Now,  you  wouldn't  say  that  that  initial  reporting  was  —  or 
inaccurate  reporting  was  on  purpose  necessarily? 

A.  No. 

Q.  Or  that  news  organizations  meant  to  get  them  wrong? 

A.  Again,  this  is  —  as  somebody  sitting  at  home  with  his  kids 
looking  at  the  news,  not  as  a  researcher. 

Q.  Right.  Right.  So  I  guess  my  question  is:  Do  you  see  what 
might  be  sort  of  the  same  problems  there  in  terms  of  describing  a 
motivation  to  a  particular  incident  or  a  particular  number  of  deaths 
when  it's  based  on  sort  of  a  firsthand  account  in  time 
contemporaneously? 
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A.  I  assume  where  you're  going  is  that  it's  possible  that  the 
count  based  on  the  logs  was  less  accurate  than  the  ultimate  count. 

The  point  here  is  a  matter  of  whether  the  information  comes  in  the 
context  where  its  political  valence  is  understood  or  in  the  context 
that  it's  not.  The  public  statements  about  the  number  of  civilian 
casualties  embody,  you're  right,  a  certain  cleaning  process.  But 
they  also  embody  an  understanding  of  what  the  politics  are  of  the 
events.  How  you  define  what  counts  as  caused  or  not  caused  by  the 
actions  will  allow  you  to  shrink  the  results.  What  we  have  here  was 
an  independent  account  based  on  formal  documents  that  allowed  for  an 
analysis  that  was  uncorrelated  with  the  analysis  that  already  came 
with  an  understanding  of  its  political  consequences. 

So  again,  as  with  any  context  of  trying  to  understand  what 
is  the  truth  of  the  matter,  finding  another  source  that  is 
sufficiently  distinct  and  not  tainted  by  the  same  problem,  which  is 
understanding  the  political  consequences  of  the  reporting,  give  us  a 
real  insight  —  us,  the  public,  a  real  insight  into  two  potential 
numbers . 

Now,  if  you  then  want  to  engage  in  a  political  debate,  no, 
no,  here's  why  these  are  wrong  and  here's  why  we  are  right,  that's 
fine.  But  it's  a  distinct  uncorrelated  source  of  data  that  gives  you 
a  real  sense  of  some  confidence  of  whether  or  not  there's  variation. 
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which  may  or  may  not  be  because  of  political  considerations  in  the 
definition  of  what  counts  as  a  casualty. 

In  any  event,  it  is  journalism.  It  is  a  question  of  what 
is  a  news  source  on  a  question  that  is  absolutely  central  to  public 
debate  that  comes  from  a  different  source  and  gives  us  a  very 
different  picture  and  forces  a  public  debate  over  which  of  the  two 
numbers  is  right,  how  they  were  arrived  at.  That's  a  context  of 
journalism  going  back  to  your  original  question  where  the  mass 
release  is  what  actually  gives  us  this  perspective. 

ATC [CPT  MORROW] :  Your  Honor,  if  you  want  to  take  a  break  at 

this  time. 

MJ:  Well,  is  this  a  good  time  for  both  sides  to  take  a  break? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  We  would  request  just  an 

hour  and  15  minutes. 

MJ:  Start  then  at  - 

ATC [CPT  MORROW]:  Can  you  give  us  one  moment,  please? 

MJ:  Yes. 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  requests  an  hour  and  15 
is  fine  or  whatever  variant  the  court  will  say;  however,  we  will  get 
back  to  the  Court.  We  might  need  additional  time  in  order  to  show  a 
newly  found  piece  of  evidence  to  Professor  Benkler  to  test  his 
opinion. 
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MJ:  If  you  likely  require  additional  time  we  can  start  at  1430 

if  you  think  you're  going  to  require  it. 

TC [MAJ  FEIN]:  We  think  we  will,  ma'am,  but  we  have  to  ask  the 
predicate  questions  during  the  break. 

MJ:  Any  objection  to  starting  at  1430? 

CDC [MR.  COOMBS]:  No  objection,  Your  Honor. 

MJ:  Court  is  in  recess  until  1430. 

[The  court-martial  recessed  at  1245,  10  July  2013.] 

[The  court-martial  was  called  to  order  at  1436,  10  July  2013.] 

MJ:  The  Court  is  called  to  order. 

Let  the  record  reflect  all  parties  present  when  the  Court 
last  recessed  are  again  present  in  court,  and  the  witness  is  on 
witness  stand.  Captain  Morrow? 

ATC [CPT  MORROW]:  Yes,  ma'am.  Just  a  few  more  questions. 

CROSS-EXAMINATION  continued: 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  Professor  Benkler,  you're  still  under  oath. 

Professor  Benkler,  have  you  ever  seen  a  traditional 
news  organization  or  journalistic  enterprise  actively  solicit 
submissions  of  classified  information? 

A.  Not  really.  I  see  tips  being  requested  that  —  I  wouldn't 
say  it's  a  standard  practice  broadly  soliciting,  no. 
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Q.  And  you've  never  been  an  intelligence  analyst;  is  that 
correct? 

A.  No,  I  haven't. 

Q.  You  served  in  the  IDF,  but  you  weren't  in  the  intelligence 
field? 


A.  No,  I  was  not. 

Q.  And  earlier  you  spoke  about  how  a  lot  of  the  information  in 
the  Army  counterintelligence  document  was  in  open  source;  is  that 
correct? 


A.  Information  that  I  was  able  to  glean  myself  from  materials 
that  were  out  in  the  open,  in  that  regard,  yes. 

Q.  But  you  didn't  have  access  to  all  of  the  sources  of  the 
documents,  the  footnotes,  for  example,  you  couldn't  go  back  and 
verify  every  single  source  of  information? 

A.  Would  you  like  me  to  talk  about  the  footnotes  given  that 
they  haven't  been  unclassified? 

Q.  No.  I  don't  need  you  to  talk  specifically  about  the 
footnotes,  but  you  didn't  have  --  you  couldn't  go  back  and  check 
every  single  thing? 

A.  Are  you  comfortable  with  my  talking  about  the  footnotes? 

MJ:  Let's  wait  for  just  a  moment. 

ATCtCPT  MORROW]:  No.  Let's  just  move  on. 

MJ:  I'll  just  ask  the  question.  Do  you  have  access  to  them? 
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WIT:  I  had  access  to  the  version  that  was  on-line  which  included 

MJ:  Thank  you. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  MORROW] : 

Q.  I  want  to  read  you  a  quote  and  get  your  thought.  WikiLeaks 
described  itself  as  the  first  intelligence  agency  of  the  people. 
Better  principled  and  less  parochial  than  any  governmental 
intelligence  agency,  it  is  able  to  be  more  accurate  and  relevant,  it 
has  no  commercial  or  national  interests  at  heart.  Its  only  interest 
is  in  the  relevant  use  —  the  revelation  of  the  truth.  Unlike  the 
covert  activities  of  State  intelligence  agencies,  WikiLeaks  relies 
upon  the  power  of  overt  fact  to  enable  to  empower  citizens  to  bring 
feared  and  corrupt  governments  and  corporations  to  justice.  Have  you 
heard  that  mission  statement  before  or  seen  it  somewhere? 

A.  Probably.  I'm  familiar. 

Q.  It's  somewhat  similar  to  the  mission  statement  of  what  you 
spoke  about  earlier  in  terms  of  exposing  corruption? 

A.  That  version,  which  was  more  prominent,  emphasized  more  the 
standard  democratic  transparency  models  rather  than  this  —  how 
should  I  put  it  in  a  poetic  form. 

Q.  In  your  experience,  have  you  ever  heard  of  a  journalist 
refer  to  having  an  intelligence  source?  Now,  journalists  have 


10306 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 


o 


J 


sources,  but  have  you  ever  heard  journalists  refer  to  having  an 
intelligence  source? 

A.  I  think  they  just  mostly  talk  about  the  confidential 
sources  or  sources  rather  specifically  intelligence  sources. 

Q.  In  your  experience,  have  you  ever  heard  of  journalists 
referred  to  outing  a  spy  in  their  organization? 

A.  Outing  a  spy  in  their  organization? 

Q.  Yes.  It  sounds  odd  I  know  but. 

A.  I  think  it's  too  hard  to  describe  how  people  will  use 
rhetoric  within  very  large  organizations  in  very  diverse  forms. 

Q.  Now,  we've  talked  extensively  about  how  initial  reports, 
not  really  that  extensively,  but  we're  talked  about  initial  reports 
about  the  release  of  Department  of  State  cables  was  somewhat 
inaccurate;  is  that  correct? 

A.  Yes. 

Q.  And  some  press  outlets  reported  that  WikiLeaks  had  released 
251,287  cables,  and  now  would  you  agree  that  that  reporting  was  based 
on  what  WikiLeaks  was  saying  about  what  they  had  in  their  possession? 

A.  The  reporting  was  based  on  what  was  understood  on  what  was 
said  was  in  WikiLeaks'  possession,  yes,  but  it  didn't  - 

Q.  Again,  newspapers  misreported  that.  It  actually  didn't 
release  that  many  at  that  time? 
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A.  Precisely,  that  it  had  been  released,  that  it  had  been 
released  in  unredacted  form,  neither  of  which  was  true. 

Q.  And  that  was  something,  at  least  in  that  case,  in  November 
—  you  can  back  and  say  that  was  November  2007,  that  was  something 
you  could  independently  verify? 

A.  Yes. 

Q.  Now,  you're  aware  now  that  WikiLeaks  released  251,000 
purported  Department  of  State  cables  in  unredacted  form,  right? 

A.  Much  later. 

Q.  In  August  of  2011.  Professor  Benkler,  you'd  agree  that  your 
views  on  this  court-martial  are  pretty  well  known;  is  that  correct? 

A.  I  have  written  publicly  on  this. 

Q.  You  wrote  an  op-ed  for  the  New  York  Times  or  you  co¬ 
authored  an  op-ed  on  March  7,  2013? 

A.  I  did. 

Q.  And  that  was  titled,  "Death  to  Whistle  Blowers?" 

A.  Yes. 

Q.  Also  March  of  2013,  you  wrote  an  article  for  the-  New 
Republic ? 

A.  Yes. 

Q.  And  that  was  titled  the  "Dangerous  Logic  of  the  Bradley 
Manning  Case?" 

A.  Yes. 
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ATC [CPT  MORROW]:  Thank  you.  Nothing  further. 

MJ:  Mr.  Coombs? 

REDIRECT  EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  I  didn't  have  any  redirect  until  the  last  two  questions.  I 
want  to  give  you  an  opportunity  to  explain  both  of  those  op-ed 
pieces.  Can  you  tell  the  judge  what  the  first  op-ed  piece  was  about? 

A.  I  wrote  an  article  together  with  Floyd  Abrams  who  is  a 
leading  First  Amendment  lawyer  who  represented  the  New  York  Times  in 
the  Pentagon  Papers  case,  because  we  have  this  agreement  between  us 
on  the  substance  of  the  specifics  of  WikiLeaks,  we  have  a  different 
view,  but  we  agreed  that  it  was  particularly  dangerous  to  the  model 
of  the  way  in  which  the  free  press  works.  If  the  threat  to  potential 
whistle  blowers  and  leakers  was  as  great  as  the  death  penalty  or  life 
in  prison,  and  that  even  people  who,  like  the  two  of  us,  disagreed  on 
the  merits  of  the  particulars  in  this  case,  could  agree  that  the  cost 
that  finding  PFC  Manning  guilty  of  aiding  the  enemy  would  impose  in 
terms  of  the  willingness  of  people  of  good  conscious  but  not  infinite 
courage  to  come  forward  and  reveal  would  severely  undermine  the  way 
in  which  leak-based  investigative  journalism  has  worked  in  the 
tradition  of  free  press  in  the  United  States. 

Q.  And  then  the  second  piece? 
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A.  The  second  piece  was  a  short  more  popular  version  of  the 
deep  long  article  that  I  gave.  I  particularly  emphasized  there,  as 
best  I  remember,  the  way  in  which  WikiLeaks  did  serve  a  particular 
journalistic  function  and  the  way  in  which  too  excessive  a  punishment 
would  destabilize  the  balance  between  transparency  and  the 
contribution  we  get  there  and  the  appropriate  framework  for 
preventing  unauthorized  disclosure.  And  so  the  concern  was  that  if 
essentially  —  let  me  back  up. 

The  logic  I  describe  —  in  what  I  call  the  dangerous  logic. 
The  logic  I  describe  was  that  in  order  to  —  once  you  accept  that 
WikiLeaks  is  a  new  journalistic  organization,  if  handing  materials 
over  to  an  organization  that  can  be  read  by  anyone  with  an  Internet 
connection  means  that  you  are  handing  it  over  to  the  enemy,  that 
essentially  means  that  any  leak  to  a  media  organization  that  can  be 
read  by  any  enemy  and/or  in  the  world  becomes  automatically  aiding 
the  enemy.  The  dangerous  logic  is  that  you  essentially  exclude  the 
question  of,  have  you  actually  gone  to  the  enemy?  It's  enough  — 
that  was  the  logic  of  the  claim  that  I  was  criticizing.  It's  enough 
that  you've  given  it  to  a  medium  that  was  readable  on  the  Internet 
for  you  to  immediately  move  on.  And  what  I  wrote  was  that,  that 
can't  possibly  be  the  claim.  There  has  to  be  something  fundamentally 
more  than  simply  giving  to  an  organization  that  publishes  as  a 
journalistic  organization,  but  is  accessible  everywhere  in  the  world. 
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CDC [MR.  COOMBS]:  Thank  you.  Retrieving  from  Professor 

Benkler  Defense  Exhibit  Golf-Golf  from  the  witness  and  Prosecution 
Exhibit  45.  No  further  questions. 

MJ:  Professor  Benkler,  I  have  a  couple  of  questions. 

EXAMINATION  BY  THE  COURT-MARTIAL 
Questions  by  the  military  judge: 

Q.  Early  in  your  testimony  you  mentioned  another  leak 
organization,  I  believe  it  began  with  an  L. 

A.  LiveLeak. 

Q.  LiveLeak.  What  is  that? 

A.  Frankly  it  was  —  it's  not  become  a  significant 
organization.  I  mostly  come  across  it  in  the  context  of  that  story. 
This  was  another  early  leaking  organization  that  had  much  more  of 
anything  goes  and  anything  could  be  posted.  I  described  it  in  the 
context  of  a  Los  Angeles  Times  story  that  was  trying  to  describe 
WikiLeaks  as  part  of  the  phenomenon  of  leaking  sites,  but  then 
juxtapose  these  two  sites. 

LiveLeak,  to  the  best  of  my  knowledge,  has  not  really 
developed  into  a  significant  source  of  insight  and  the  core 
differentiation  between  them  was  that  WikiLeaks  was  more  careful  in 
authenticating  and  more  cautious  in  how  it  published. 

Q.  Do  you  consider  Liveleaks  part  of  the  Fourth  Estate? 
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A.  I  haven't  really  looked  at  it  closely  enough  to  see.  It 
really  would  depend  on  its  function.  I'm  not  trying  to  avoid  the 
answer.  I  don't  want  to  pretend  to  know  something  about  a  site  that 
I  haven't  really  studied. 

q.  I'm  not  suggesting  that.  I  guess  in  your  testimony  earlier 
you  talked  about  Fourth  Estate  is  broad,  it  now  sort  of  includes 
bloggers  that  in  traditional  newspaper  organizations  are  melding,  if 
you  will,  and  getting  information  from  each  other.  If  a  person, 
anybody,  you,  me,  anyone  here  in  the  gallery,  had  information  that 
they  weren't  supposed  to  disclose  for  some  reason  or  another  or  was 
protected,  contract  bidding  information,  something  like  that  for 
example,  and  put  it  on  an  individual  blog  for  the  world  to  see,  is 
that  person  now  a  journalist? 

A.  I  don't  think  so.  I  think  that  —  well,  it  depends  on  the 
context.  If  there's  a  direct  violation  of  that  person's  duty  not  to 
disclose,  that  doesn't  get  washed  away  by  the  fact  that  they've 
disclosed  it,  but  this  is  the  problem  of  defining  the  range  of  the 
journalist  privilege,  as  the  Supreme  Court  wrote  in  Branzburg,  it's 
the  liberty  of  the  press  is  the  right  of  the  lonely  pamphleteer  with 
a  mimeograph  as  it  is  from  the  metropolitan  press  with  the  latest 
technologies.  It's  a  hard  line  to  draw.  You  would  not  —  if  someone 
publishes  it  in  a  form  that  is  intended  for  the  public,  we  see  this  a 
little  bit  with  reporters  privileges  of  cases  in  the  Second,  Third, 
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and  Ninth  Circuits  where  they're  working  a  little  bit  with  questions 
of  people  who  are  doing  the  research  by  themselves  and  end  up  coming 
and  saying,  we  can't  distinguish  between  these.  We  have  to  treat 
them  for  purposes  of  reporter's  privilege  where  it  exists  in  the 
states  where  it  exists,  within  that  reporter's  privilege.  That's  the 
line,  the  place  where  I  would  look  for  the  line  in  those  states  like 
New  Jersey  that  have  the  privilege.  It's  those  line  drawing 
exercises  that  I  think  are  the  most  productive  for  our  purposes  here. 

MJ:  Thank  you.  Any  follow-up  questions  based  on  that? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

ATC [CPT  MORROW]:  No,  Your  Honor. 

MJ:  Temporary  or  permanent  excusal? 

CDC [MR.  COOMBS]:  Permanent  excusal. 

[The  witness  was  permanently  excused  and  withdrew  from  the 
courtroom . ] 

CDC [MR .  COOMBS]:  Your  Honor,  the  defense  rests. 

MJ:  All  right.  PFC  Manning,  you  have  not  testified,  is  that 

your  decision? 

ACC:  Yes,  Your  Honor. 

MJ:  And  the  Court  was  given  a  list  of  additional  witnesses  by 

the  defense.  Is  it  also  your  decision  not  to  call  any  of  them? 

ACC:  That's  correct.  Your  Honor. 

MJ:  Is  the  government  going  to  have  a  rebuttal  case? 
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TC [MAJ  FEIN]:  At  this  time  the  government  does  intend  to  have  a 
rebuttal  case. 

MJ:  We  spoke  about  timing  issues  at  the  802  conference  that  we 
held  earlier  today,  and  it's  my  understanding  that  the  government  is 
going  to  give  the  defense  notice  of  the  rebuttal  case  on  Monday. 

TC [MAJ  FEIN]:  Yes,  Your  Honor.  It's  one  of  the  few  things  we 
planned. 

MJ:  And  you  owe  me  the  responses  to  the  four  motions  for  the 

finding  of  not  guilty  from  the  defense? 

TC [MAJ  FEIN]:  Yes,  ma'am,  by  C.O.B.  Thursday,  tomorrow  we  owe 
the  four  responses  to  that .  Monday  we  have  scheduled  that  the  Court 
will  hear  argument,  if  any,  on  the  motions  to  dismiss  R.C.M.  917,  and 
if  there  is  any  argument  on  whether  the  government's  rebuttal  case 
if  the  defense  has  any  argument  against  whether  we  are  inside  or 
outside  the  scope  of  the  rebuttal. 

MJ:  All  right.  Then  we  will  be  on  the  record  then  on  Monday  at 

0930;  is  that  correct? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC[MR.  COOMBS]:  Yes,  Your  Honor.  And  the  defense  would  request 
that  we  can  decide  an  exact  time  after  this  session,  but  a  time 
period  in  which  the  government  gives  us  notice  of  rebuttal  on  Monday 
with  the  witnesses  that  they  intend  to  call  and  the  exact  facts  that 
they  are  calling  those  witnesses  in  order  to  rebut  some  fact  listed 
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by  the  defense  in  this  case;  but  a  time  for  that  to  occur  on  Monday 
and  that  way  from  that  point  forward  we  could  prepare  argument  and  be 
prepared  later  that  same  day  to  argue. 

MJ:  Why  don't  we  do  this,  because  it  may  make  more  sense  to 

start  later  on  on  Monday?  When  we  finish  here  let's  take  a  brief 
recess  and  talk  about  logistics  and  scheduling  so  we  don't  put 
something  out  and  then  change  it,  and  we'll  come  back  on  the  record 
and  we'll  have  the  definite  way  ahead. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  And  one  thing  I  did  want  to  mention  to  the  defense,  two 

things  actually.  PFC  Manning,  if  this  were  a  members  case,  my 
instructions  to  the  members  would  be  that  the  accused  has  an  absolute 
right  to  remain  silent.  You  will  not  draw  any  inference  adverse  to 
the  accused  from  the  fact  that  he  did  not  testify  as  a  witness.  The 
fact  that  he  has  not  testified  must  be  disregarded  by  you.  I  intend 
to  follow  that  instruction. 

ACC:  Thank  you. 

MJ:  And  the  other  issue  I  wish  to  address  with  the  defense  is, 

there  is  a  footnote  in  your  motion  for  finding  of  not  guilty  for  641 
that  says  based  on  your  motion  that  you  haven't  contacted  a 
particular  valuation  expert.  You  have  now  until  —  we're  not  going 
forward  until  next  Wednesday.  You  have  time  to  do  that  should  you 
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want  to  and  the  Court  will  give  you  a  continuance  if  you  want  to  do 
that . 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

MJ:  I'm  not  suggesting  in  any  way  how  I'm  going  to  rule,  I'm 

just  saying  that  the  opportunity  is  there. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  Is  there  anything  else  we  need  to  address  before  we  recess? 

CDC [MR .  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  We'll  probably  come  back.  Do  you  think  15  minutes  is  about 

right  or  do  you  think  we'll  need  longer  than  that? 

TC [MAJ  FEIN]:  Fifteen  minutes. 

MJ:  The  Court  is  in  recess  until  1500. 

[The  court-martial  recessed  at  1454,  10  July  2013.] 

[The  court-martial  was  called  to  order  at  1507,  10  July  2013.] 

MJ:  The  Court  is  called  to  order. 

All  parties  present  when  the  Court  last  recessed  are  again 
present  in  court. 

I  believe  we  have  reached  a  way  forward.  The  plan  will  be 
we  will  reconvene  on  Monday  at  1500,  and  at  that  time  if  the  parties 
want  oral  argument  on  rebuttal  or  the  scope  of  rebuttal,  and  the  four 
defense  917  motions,  we'll  do  that  at  that  time.  Depending  on  the 
ruling  on  rebuttal,  if  there  is  going  to  be  a  rebuttal  case,  we  will 
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begin  on  Thursday  at  0930.  If  not,  we  will  have  closing  argument 
starting  on  Tuesday  at  0930.  So  whether  we  go  on  Tuesday  or  on 
Thursday  will  not  be  settled  until  Monday  afternoon.  Is  that  the 
parties'  understanding? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

TC [MAJ  FEIN]:  Yes,  Your  Honor. 

MJ:  And  the  notice  from  the  government  on  rebuttal  will  be  at 

0900  on  Monday  morning  to  both  the  defense  and  the  Court? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Is  there  anything  else  we  need  to  address  now? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  All  right.  Court  is  in  recess  until  Monday  at  1500. 

[The  court-martial  recessed  at  1509,  10  July  2013.] 

[END  OF  PAGE] 
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[The  court-martial  was  called  to  order  at  1512,  15  July  2013.] 

MJ:  the  Court  is  called  to  order.  Major  Fein,  please  account 

for  the  parties. 

TC [MAJ  FEIN]:  Yes,  ma'am.  Your  Honor.  All  parties  when  the 
Court  when  last  recessed  are  again  present  with  the  following 
exception,  Mr.  Chavez,  Court  Reporter  is  absent.  Mr.  Robertshaw, 
Court  Reporter  is  present  [previously  sworn] .  Also,  Your  Honor,  as 
of  1449  this  afternoon  there  are  19  members  of  the  media  at  the  Media 
Operation  Center,  one  stenographer;  25  spectators  in  courtroom;  and 
10  spectators  in  overflow  trailer. 

[Pause] 

MJ:  All  right.  Major  Fein,  before  I  ask  you  about  new  filings, 

I  just  want  to  put  on  the  record  the  Court  made  a  second  amendment  to 
the  draft  instructions  based  on  the  government's  advisal  to  me  they 
were  removing,  or  no  longer  pursuing  the  classified  enemy  with 
respect  to  the  Specification  of  Charge  I  and  Charge  I,  aiding  the 
enemy.  That  ruling  reads:  For  the  Specification  of  Charge  I,  Aiding 
the  Enemy,  in  violation  of  Article  104  UCMJ,  the  government  advised 
the  Court  it  is  not  offering  evidence  that  PFC  Manning  knowingly  gave 
intelligence  to  a  classified  entity  specified  in  Bates  Number 
00410660-00410664.  Accordingly,  the  Court  makes  the  following 
amendment  in  the  instruction  for  the  Specification  of  Charge  I  at 
Appellate  Exhibit  410,  change  current  instruction;  One,  that  at  or 
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near  contingency  Operation  Station  Hammer  Iraq,  between  on  or  about  1 
November  2009  and  on  or  about  27  May  2010,  the  accused,  without 
proper  authority,  knowingly  gave  intelligence  information  to  certain 
persons,  namely  al-Qaeda,  al-Qaeda  in  the  Arabian  Peninsula,  and  an 
entity  specified  in  Bates  Number  00410660  through  00410664  classified 
entity.  Amended  instruction  states:  One,  that  at  or  near  Contingency 
Hammer  Station  —  Contingency  Operator  Station  Hammer  Iraq,  between 
on  or  about  1  November  2009  and  on  or  about  27  May  2010,  the  accused, 
without  proper  authority,  knowingly  gave  intelligence  information  to 
certain  persons;  namely  al-Qaeda  and  al-Qaeda  in  the  Arabian 
Peninsula."  So  ordered  this  the  day  of  15th  day  July,  2013.  It  will 
be  marked  as  the  next  appellate  exhibit  in  line. 

[The  instruction  was  marked  Appellate  Exhibit  604.] 

MJ:  Major  Fein,  would  you  like  to  address  the  new  exhibits  that 

have  been  filed? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Your  Honor,  there  are  five  exhibits 
that  have  been  filed  —  appellate  exhibits  —  since  the  Court  last 
recessed.  First,  Appellate  Exhibit  599  is  the  government's  response 
to  the  defense's  motion  for  a  directed  verdict  for  the  641  offenses. 
Appellate  Exhibit  600  is  the  government's  response  to  defense's 
motion  for  directed  verdict  under  R.C.M.  917  for  the  Article  104 
offense.  And  Appellate  Exhibit  601  is  the  government's  response  to 
the  defense  motion  for  a  directed  verdict  Under  R.C.M  917  to  the  18 
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U.S.C  1030  offense.  Appellate  Exhibit  602  is  the  government's  notice 
of  a  potential  rebuttal  case,  dated  15  July  2013.  And  Appellate 
Exhibit  603  is  the  defense's  reply  to  the  government's  response  to 
the  defense's  motion  for  a  directed  verdict  under  R.C.M.  917  for  the 
641  offenses. 

MJ:  Thank  you.  Mr.  Coombs,  I  would  like  to  set  forth  for  the 

record  some  email  traffic  that  occurred  between  the  defense  and  — 
well,  between  the  parties  and  Court,  but  directed  toward  the  defense, 
with  respect  to  the  Motion  to  Dismiss  —  or  Motion  for  Finding  of  Not 
Guilty  under  R.C.M  917  for  the  1030(a)  offense,  particularly 
Specification  13  of  Charge  II. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  All  right,  the  motion  itself  asks  me  to  dismiss  that 

specification.  I  noted  earlier  that  PFC  Manning  had  entered  a  plea 
to  a  lesser  included  offense  of  the  specification,  but  I  wanted  to 
clarify  for  the  record  what  the  defense  was  asking  for. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  We  are  only  asking  that 

the  Court  dismiss  the  greater  offense.  We  are  not  retracting  PFC 

Manning's  plea  to  the  lesser  included  offense. 

MJ:  All  right.  Thank  you. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  Prior  to  coming  on  the  record  today,  I  met  with  counsel  at 
an  R.C.M.  802  conference,  which,  once  again,  is  where  counsel  and  I 
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discuss  scheduling  and  other  issues  that  may  arise  in  the  cases.  And 
there  was  some  additional  email  traffic  that  went  back  and  forth 
since  the  last  session  involving  defense  had  requested  access  to  the 
transcript  of  the  proceedings.  And  the  government  is  preparing  to 
provide  them  some  access  to  what  has  been  prepared  thus  far.  Is  that 
correct? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  has  asked  the 
court  reporters  to  —  to  collate  all  of  the  transcripts  that  have 
been  finished  by  the  pool  of  court  reporters  from  around  the  country 
and  put  those  together.  And  once  an  entire  section  for  one  39(a) 
complete  session  is  completed  and  compiled.  Then  we  would  give  that 
to  all  parties,  including  the  government,  defense  and  Court. 

MJ:  Thank  you.  Defense,  any  issues  with  that? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

MJ:  The  parties  had  indicated  the  government  had  requested  some 

additional  discovery  material  from  the  defense  pursuant  to  R.C.M.  914 
or  our  equivalent  —  military  equivalent  of  the  Jencks  Act.  Major 
Fein,  would  you  like  to  set  forth  for  the  record  what  you're  asking 
for  and  what  has  transpired? 

TC [MAJ  FEIN]:  Yes,  ma'am.  On  Friday  afternoon,  after  the 
United  States  finished  its  filings  late  Thursday  night  for  the  R.C.M. 
917  motions,  we  started  reviewing  and  preparing  for  any  potential 
rebuttal  case  and  realized  that  the  defense  referenced  during  the 


10321 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


© 


J 


testimony  of  Chief  Ehresman,  in  the  case  —  in  the  defense's  case  in 
chief,  a  specific  email  that  the  defense  sent  to  Chief  Ehresman  and 
that  Chief  Ehresman  responded  to.  So  the  United  States  realized, 
after  reviewing  its  —  its  reciprocal  discovery,  that  we  never 
received  that  email  in  reciprocal  discovery.  So  understanding  that 
reciprocal  discovery  traditionally  is  not  Jencks,  or  R.C.M  914 
material,  we  went  back  through,  looked  for  it,  and  then  we  asked  the 
Court  over  email  or  gave  notice  to  the  Court  that  we'd  be  asking 
today  for  the  defense  to  produce  any  remaining  R.C.M.  914  Jencks 
material  for  any  of  their  witnesses  that  had  testified;  and 
specifically  that  one  email  and  any  other  similar  emails.  And  then, 
just  to  note  for  the  record,  the  United  States  has  always  maintained, 
with  the  concurrence  of  the  defense  and  Court,  that  statements  under 
R.C.M.  914  do  include  potential  emails  that  it  would  be  the  subject 
matter  —  the  statement  itself  that  would  —  would  qualify  as  Jencks 
or  R.C.M.  914  material,  not  necessarily  being  just  an  email.  And 
that  was  filed  at  Appellate  Exhibit  270  by  the  government  on  3  August 
2012.  And  the  United  States  has  always  maintained  that  it  could 
include  emails,  and,  in  fact,  it's  produced  emails  throughout  pre  and 
post  —  or  not  pre  and  post  —  pre  and  trial  discovery  that  includes 
emails  as  part  of  Jencks  material.  And  that  was  also  part  of  the 
Court  calendars  to  lay  out  all  this  type  of  material  to  be  disclosed. 
So  the  United  States  ultimately  requests  that  the  defense  produce  all 
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that  —  any  Jencks  material,  any  statements  that  relates  to  the 
testimony  of  their  —  of  the  witness'  testimony.  And  prior  to  this 
session,  we  did  receive  the  one  email  that  we  at  least  know  about 
that  was  referenced  by  Chief  Ehresman. 

MJ:  All  right.  Mr.  Coombs? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  Appellate  Exhibit  270  was  the 
government's  position  on  what  they  would  provide  to  the  defense.  The 
defense  doesn't  believe  that  Jencks  applies  to  emails.  However,  we 
did  in  good  faith  look  at  all  of  our  emails  with  our  8  witnesses  to 
include  the  —  the  9th  witness.  Chief  Ehresman.  We  found  one  email 
that  was  responsive  potentially  to  what  you  —  could  consider  to  be 
Jencks  material,  and  we  provided  that  to  the  government. 

MJ:  All  right.  Do  we  have  any  outstanding  issues  with  Jencksl 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  Ma'am,  just  —  again,  for  point  of  clarification, 
the  defense  maintained  until  today  that  emails  weren't  included.  So 
if  defense  has  reviewed  all  their  emails  and  ensured  that  all  of 
their  witnesses  then  —  then  the  government's  fine  with  that.  But  if 
defense  did  ascent  to  this  in  —  or  consent  to  this  in  Appellate 
Exhibit  270,  it  was  put  on  the  record,  it  was  discussed  ad  nauseam 
between  the  parties,  and  so  this  is  —  although  that  is  correct,  this 
was  the  government's  position,  it  defined  Jencks  in  this  trial.  So 
as  long  as  nothing  else  is  out  there,  Your  Honor,  then  the  government 
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absolutely  has  no  issue  going  forward. 

MJ:  All  right.  Well  R.C.M.  914  defines  what  material  is 

incorporated  into  Jencks.  And  it  appears  an  email  may  or  may  not  be 
incorporated  as  the  one  at  issue  was  turned  over.  At  this  point  I 
don't  see  any  need  for  further  litigation.  Mr.  Coombs,  as  an  officer 
of  the  Court,  has  advised  the  Court  they  have  looked  and  there  are  no 
additional  emails  that  could  potentially  be  responsive  under  R.C.M. 
914.  That's  right,  right? 

CDC [MR .  COOMBS]:  That  is  correct.  Your  Honor.  And  much  like 

as  the  government,  as  officers  of  the  Court,  has  said  the  same;  they 
have  emails  that  they  would  turn  over  to  the  defense. 

MJ:  So  the  Court  sees  no  additional  Jencks  issues  at  this 

point.  The  parties  have  filed  —  or  the  defense  has  filed  four 
separate  motions  for  findings  of  not  —  for  the  Court  to  enter 
findings  of  not  guilty  that  were  addressed  earlier.  One  of  those 
motions  —  or  two  of  those  motions  actually  involve  the  offenses 
under  18  United  States  Code,  Section  641,  and  Article  134,  which  are 
basically  the  steal,  purloin,  or  knowingly  convert  offenses.  And 
there  were  two  footnotes  in  the  defense's  filings  and  the  reply. 

They  talked  about  if  the  Court  was  to  rule  a  particular  way  the 
defense  requested  additional  filings  that  they  would  like  to  file.  I 
advised  the  parties  that  I  would  like  to  consider  the  R.C.M.  917 
motion  with  all  of  the  evidence  and  all  of  the  parties'  positions 
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before  me  at  one  time.  So  the  procedure  that  we  have  worked  out  is; 
the  defense,  by  the  end  of  today,  is  going  to  file  an  email  outlining 
their  position  with  respect  to  the  additional  issues,  as  well  as  the 
case  authority  that  they  are  relying  on,  for  both  pro  and  con,  I 
believe  you  said. 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

MJ:  Okay,  and  then  the  government  has  until  close  of  business 

tomorrow  to  file  any  response  to  that  motion.  And  we  will  orally 
argue  that  motion  on  Thursday  in  the  morning  when  we  begin.  The 
Court  will  be  prepared  to  rule  on  the  R.C.M.  917  motions  with  respect 
to  the  aiding  the  enemy  offense  and  the  computer  fraud,  the 
Specification  --  the  Specification  of  Charge  I  and  Specification  13 
of  Charge  II,  will  be  prepared  to  enter  that  ruling  on  the  Thursday 
session.  Is  there  anything  else  we  need  to  address  before  we  proceed 
with  the  oral  argument  on  those  motions? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  And  I  note  for  the  record  that  the  defense  requested  oral 

argument  on  all  of  their  917  motions. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  All  right.  Go  ahead. 

CDC [MR.  COOMBS]:  Your  Honor,  what  I'd  like  to  do  is  just  talk 

about  the  defense's  view  on  the  1030,  917  —  not  so  much  tracking  the 
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motion  that  we  filed,  but  just  our  view  why  the  917  should  be 
granted.  First,  I  —  backtracking  slightly  just  to  talk  about  the 
historical  nature  of  the  many  filings  that  we  filed  on  1030.  This 
would  be  the  third  motion  to  dismiss  it.  Here's  hoping  third  time's 
a  charm. 

But  I'd  like  to  start  off  with  just  talking  about  the  first 
time  that  we  filed.  When  we  first  filed  the  motion,  the  issue  was 
over  whether  or  not  U.S.  v  John,  U.S.  v  Rodriguez  line  of  cases,  the 
Courts  follow  kind  of  a  broad  view  of  how  1030  is  viewed  or  the 
narrow  view,  which  is  U.S.  v.  Nosal.  And  in  that  motion  hearing  the 
—  what  came  out  of  that  was  the  Court  determined  that  it  would 
follow  the  narrow  version  of  U.S.  v.  Nosal.  And  specifically  what 
the  Court  said  was  that  the  term  exceeds  authorized  access  is  limited 
to  violations  of  restrictions  on  access  to  information,  not 
restrictions  on  its  use.  At  that  time  the  government  avoided  a 
dismissal  based  upon  its  representation  that  it  did  intend  to  prove  a 
violation  of  restriction  on  access;  an  accessed  based  restriction. 

And  the  theory  of  the  government  kind  of  shifted  at  that  point  from 
embracing  the  broad  view  of  John  and  Rodriguez  to  going  to  a  theory 
which  they  said  PFC  Manning  used  an  unauthorized  program;  Wget,  and 
that  program  circumvented  the  normal  open,  click,  save  process,  that 
the  mass  entry  performance  based  database  required,  and  thus,  he 
bypassed,  in  the  government's  words,  a  code  based  restriction  on 
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using  Wget.  When  the  government  brought  that  theory,  the  defense 
brought  its  second  motion  to  dismiss.  And  the  defense's  position  was 
that  there  no  code  based  restriction  and  that  this  was  simply  a  use 
authorization  restriction,  if  anything,  as  opposed  to  an  access 
restriction.  And  what  came  out  of  that  second  motion,  again,  was, 
because  the  Court  didn't  have  the  benefit  of  all  the  evidence,  the 
motion  to  dismiss  was  not  granted,  but  importantly  the  Court  talked 
about  the  fact  that  there  were  other  types  of  restrictions,  other 
than  purely  code  based  or  technical  restrictions;  that  there  could  be 
restrictions  that  could  come  from  a  variety  of  sources  to  include 
regulations,  user  agreements  or  command  policies.  And  even  though 
the  Court  had  that  position,  the  Court  still  maintained  that  it  was 
following  the  narrow  view  of  Nosal.  And  so  reconciling  the  two  of 
those,  the  way  defense  views,  you  could  have  restrictions  —  that  you 
could  have  a  code  based  restriction,  you  could  have  a  technical 
restriction,  and  you  could  have  a  restriction  on  access  that  is 
perhaps  verbalized  or  put  in  written  form  such  that,  for  an  example, 
of  if  you  had  authorization  to  use  a  particular  computer  and  your 
employer  said  to  you,  you  can  go  to  every  place  on  this  computer  but 
this  area.  Your  access  is  restricted;  you  cannot  go  to  this  area. 

And  if  the  employer  put  that  in  verbal  or  in  a  written  format,  that 
could  be,  under  the  Court's  ruling  an  access  restriction.  And  that's 
how  the  Court  —  that's  how  the  defense  reconciled  kind  of  the  Court 
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following  the  narrow  view  saying  that  it's  not  just  limited  to  code 
and  technical  base  restrictions,  you  could  have  access  restrictions. 
Again,  there  is  a  —  as  the  defense  puts  it  in  its  motion,  that  — 
that  can  be  a  slippery  slope  trying  to  determine  what's  the 
difference  between  use  restrictions  and  access  restrictions,  or  use 
restrictions  that  the  government  is  trying  to  show  or  trying  to  use 
as  access  restrictions.  But,  regardless  of  how  you  kind  of  view 
that,  the  —  the  government's  burden  that  they  still  maintained  and 
still  had  to  prove,  was  that  PFC  Manning  violated  an  access 
restriction.  And  that  would  be  the  only  way  they  could  prove  a  1030 
offense.  And  look  at  the  government's  response  motion.  What  do  they 
say  they  need  to  prove?  And  they  go  through  kind  of  their  view  of 
how  this  motion  practice  shook  out.  They  end  up  saying,  and  I  quote 
--  base  --  well,  basically  what  they  believe  --  saying  is  all  they 
needed  to  prove  is  whether  Wget  was  an  unauthorized  program.  That's 
the  extent  to  which  the  government  believes  its  burden  for  them  ends 
once  they  prove  it's  an  unauthorized  program  then  they  have  proven 
their  1030  offense  in  their  view.  Well,  again,  setting  aside  the 
fact  that  we  don't  believe  that  evidence  has  shown  that  it  was  an 
unauthorized  program;  that  the  evidence  actually  showed  to  the 
contrary,  that  people  could  add  or  use  anything  they  wanted,  and 
there  was  confusion  between  the  various  individuals  and 
responsibility  over  what  you  could  and  could  not  do.  But  let's 


10328 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


o 


assume  just  for  argument  sake  that  it  was  an  unauthorized  program; 
that  that  was  not  a  program  you  could  use  on  the  DCGS-A  machine. 

Even  if  you  assume  that,  you  have  to  still  prove  that  the  use  of  that 
violated  or  circumvented  an  access  based  restriction.  And  where 
could  you  find  that?  Under  the  defense's  view  for  the  use  base  or 
code  base  restrictions,  you  would  find  that  from  the  testimony  of  Mr. 
Wisecarver,  or  from  the  testimony  of  the  other  defense  witnesses; 
Colonel  Miller  or  Sergeant  Madaras  or  —  excuse  me,  the  government 
witnesses;  Colonel  Miller,  Sergeant  Madaras  or  Special  Agent  Shaver. 
So  let's  go  through  those. 

Mr.  Wisecarver  from  Department  of  State  testified  there  was 
no  access  restrictions  on  the  Net-Centric  Diplomacy  Database.  He 
said  that  there  was  no  restrictions  on  click,  open,  and  save.  In 
fact,  what  he  testified  to  was  the  State  Department  actually  relied 
upon  the  receiving  agency  to  put  any  sort  of  restrictions  on  access. 
And  it  was  the  State  Department's  view  that  if  you  had  access  to  the 
SIPRNET  then  you  had  access  de  facto  to  the  Net-Centric  Diplomacy 
Database.  And  there  was  no  limitation  on  what  you  downloaded,  how 
much  you  downloaded,  what  you  chose  to  download.  None  of  that  was  an 
access  restriction  from  the  Net-Centric  Diplomacy  Database.  Now 
let's  look  at  the  unit.  Colonel  Miller,  Sergeant  Madaras  —  now  Mr. 
Madaras,  and  other  government  witnesses  talked  about  the  fact  that 
there  was  no  restriction  on  the  manner  in  which  you  saved  information 
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from  the  SIPRNET .  You  didn't  have  to  click,  open  and  save.  No  —  no 
sort  of  training  or  any  sort  of  restriction  put  out  on  —  that  this 
is  the  only  way  that  you  can  access  stuff  on  the  SIPRNET.  Now, 
Captain  Cherepko,  which  is  who  the  government  brought  to  bring  in  the 
AUP  —  first  of  all,  the  AUP  stands  for  Authorized  Use  Policy;  so 
right  out  of  the  gate  it  looks  like  it's  a  use  type  restriction  as 
opposed  to  access  —  access  restriction.  But  let's  assume  for  a 
moment  maybe  there  was  an  access  restriction  within  the  AUP.  Well, 
if  that  were  the  case,  we  don't  know,  because  the  government  never 
produced  the  AUP.  Captain  Cherepko  was  called  essentially  to  say, 
well,  the  one  in  25-2  looks  pretty  similar  to  the  one  I  think  we 
signed.  But  then  even  on  my  cross-examination  within  minutes  of 
viewing  the  one  in  25-2,  he  had  to  have  his  memory  refreshed  as  to 
what  the  terms  were  within  the  one  that  he  did  review  for  the 
government  just  seconds  before  my  cross.  So  the  government  didn't 
offer  any  evidence  as  to  an  access  restriction  with  an  AUP.  And 
there's  been  no  evidence  of  —  from  anyone  in  the  unit  that  there  was 
any  sort  of  access  restriction  on  how  you  downloaded  information  from 
the  SIPRNET.  And,  again,  Mr.  Wisecarver  said  from  the  Net-Centric 
Diplomacy  Database  there  was  no  access  restriction. 

Now  we  look  at  another  one  of  the  government's  witness; 
Special  Agent  Shaver.  He  testified  about  Wget .  And  importantly  he 
said  Wget  was  an  open  source  infor  --  program  that  was  not,  you  know. 
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associated  with  hacking  or  anything,  but  from  his  expertise  what  he 
testified  to  was  that  Wget  would  not  give  you  any  greater  access  than 
you  otherwise  didn't  already  have.  It  would  not  enable  you  to 
download  information  that  you  were  not  previously  authorized  to 
download,  would  not  authorize  you  to  see  or  view  information  that  you 
were  not  previously  authorized  to  see  or  view.  So  even  from  a 
program  standpoint,  Wget's  not  even  designed  to  exceed  authorized 
access.  So  really  from  the  government's  position  there  —  there  is 
absolutely  no  proof  that  there  was  an  access  restriction.  What  does 
the  government  point  to  though?  Their  common  refrain  is  that  the  use 
of  Wget  allowed  PFC  Manning  to  systematically  harvest  information  in 
a  rapid  format  that  he  otherwise  would  not  be  able  to  do.  So 
essentially  their  argument  boils  down  to,  because  the  Wget  program 
did  it  faster  than  what  he  could  have  done  humanly  possible  by  doing 
click,  open  and  save,  that  must  have  exceeded  authorized  access.  But 
importantly  there's  no  evidence  to  support  that  position.  Again,  if 
Manning  wanted  to,  he  could  have  spent  all  his  time  to  click,  open 
and  save  and  there  could  have  been  no  prohibition  to  that.  What  this 
program  did,  and  what  Special  Agent  Shaver  said  it  did,  was  just 
automated  that  process.  But  again  —  sorry  —  go  ahead.  Your  Honor. 

MJ:  If  —  assume  that  the  evidence  shows  that  Wget  is  an 

unauthorized  program,  is  it  the  defense's  position  by  using  Wget  to 
access  or  to  become  involved  with  —  I'll  put  it  that  way  —  the 
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classified  information  at  issue;  the  Department  of  State  cables,  that 
that's  not  an  access  restriction? 

CDC [MR .  COOMBS]:  No,  because  the  —  and  the  idea  —  you're 

then  —  you'd  be  taking,  if  that  were  the  position  —  I  think  that  is 
the  government's  position  of  under  the  user  agreement,  the  user 
agreement  said  I  won't  use  any  unauthorized  program.  We  believe  it 
is  an  unauthorized  program.  The  use  restriction  does  not  morph  its 
way  into  an  access  restriction.  What  you  would  have,  ma'am,  is  you 
would  have  a  violation  of  Article  92  perhaps.  And  that  would  be  a 
violation  of  25-2  certainly.  But  you  don't  have  something  that  goes 
from  a  2-year  violation  to  a  10-year  violation  just  because  you  used 
an  unauthorized  program.  If  we  take  it  out  —  because  I  —  I  believe 
it's  a  red  herring  to  think  about  the  speed  in  which  Wget  can  pull 
stuff  —  let's  just  assume  that  PFC  Manning  used  a  program  that  went 
the  same  speed  as  click,  open  and  save;  exact  same  speed,  but  he  used 
that  program,  and  then  the  person  right  next  to  him.  Specialist 
Jones,  decided  I'm  going  to  do  the  same  thing  you're  doing,  but  I'm 
just  going  to  do  a  click,  open  and  save.  At  the  end  of  the  day  they 
each  had  100  cables,  one  would  not  be  a  1030  violation  —  this  one 
over  here  a  1030  violation  and  this  one  over  here  not  just  by  the 
simple  fact  that  this  person  chose  to  use  a  program  that  was  not 
authorized.  They  both  had  the  same  access,  so  it  doesn't  change  the 
access.  What  it  changes,  if  at  all,  is  that  this  person  over  here 
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committed  an  Article  92  violation.  This  person  over  here  did  not. 

But  even  —  even  in  that  realm  we  look  at  the  government's  testimony, 
and  Greg  —  Greg  Weaver  was  the  person  from  25-2,  and  we  asked  him 
about  games,  music,  video,  adding  that  stuff,  is  that  a  problem  under 
25-2?  And  he  responded,  you  want  the  regulation  answer  or  do  you 
want  reality?  And  the  reality  is  that  even  though  the  regulation  may 
say  one  thing,  the  deployed  unit  does  something  different.  And 
Colonel  Miller  backed  that  up  by  saying,  well,  you  know,  there's  some 

things  that  if  my  S-6  came  to  me;  in  that  case  Tom  Cherepko,  and 

said,  hey,  these  things  are  not  permitted  or  not  entitled  to  be  done 
on  the  —  on  the  net,  I  might  say,  well,  what's  the  —  what's  the 
reason  for  that?  And  if  I  think  it's  a  morale  and  welfare  thing,  I'm 
going  to  ask  up  the  chain  or  whatnot  to  —  to  ignore  that  —  to  go 
ahead  and  allow,  you  know,  music  to  be  listened  to.  And  we  see  that 
actually  being  done  throughout  the  T-SCIF  and  through  multiple 
Soldiers  saying  I  added  things  —  newer  versions  of  a  particular 
program.  So  if  —  if  we  said  like  —  for  example  —  I  think  the  way 
the  testimony  would  shake  out  for  Mr.  Milliman,  that  he  was  the  only 
one  authorized  to  add  anything.  We  heard  from  Specialist  Showman  and 

Mr.  Madaras  that  they  had  PFC  Manning  add  a  newer  version  of  mIRC 

chat  on  their  computer.  Mr.  Milliman  talked  about  the  fact  that  -- 

MJ:  This  is  Specialist  Showman  and  who? 

CDC [MR.  COOMBS]:  Mr.  Madaras  —  Sergeant  Madaras,  ma'am.  And 
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they  talked  about  the  fact  that  approval  for  a  particular  version  was 
for  that  version.  So  if  you  added  a  newer  version  on  your  computer 
of  mIRC  chat,  then  that  would  be  an  unauthorized  program.  So  under 
the  government ' s  theory  then  somebody  who  obtains  information  through 
mIRC  chat  on  their  computer,  although  they're  sitting  right  next  to 
somebody  who's  also  using  mIRC  chat,  but  an  older  version  that's 
approved,  one  person' s  committing  a  1030  violation  and  the  other 
person's  not.  And  the  reason  why  that  can't  be  is  the  exact  reason 
Nosal,  and  all  cases  that  follow  it,  believe  that  access  restrictions 
cannot  be  use  restrictions.  Access  restrictions  have  to  be  clear. 
They  actually  have  to  indicate  the  person  is  not  authorized  to  do 
this  —  to  get  to  this  information  because  it  is  the  computer  that's 
—  that's  being  punished  —  the  use  of  the  computer,  not  getting  the 
information.  So  when  you're  looking  at  that,  then  you  have  to  have  a 
clear  access  restriction.  And  if  the  government  was  going  to  make  an 
access  restriction  based  upon  using  the  right  type  of  programs,  then 
it  has  to  be  clear;  that  has  to  be  clearly  stated  somewhere.  And 
there's  been  no  evidence  of  that  anywhere  in  the  government's  case 
other  than  people  saying  I  don't  think  Wget  —  I've  never  heard  of 
it.  I  don't  think  Wget  was  authorized. 

MJ:  What  is  defense's  position  on  what  AR  25-2  says  with 

respect  to  programs  —  executable  files;  whatever  you  want  to  call 
Wget? 
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CDC [MR.  COOMBS]:  Yeah,  when  you  look  at  the  25-2,  both  in  the 

provision  that  deals  with  executables,  it  really  doesn't  use  the  term 
executable.  What  it  uses  is  like  .EXE,  .BAT  files;  and  .EXE  files, 
ma'am,  are  executable  files.  So  when  you  look  at  the  25-2  AUP  —  the 
sample  AUP,  and  also  the  provision  charged  by  the  government,  it 
doesn't  clearly  spell  out  executable  files.  But  one  important  thing 
in  there  is  it  has  a  caveat  to  the  prohibition.  And  that  caveat  is 
without  authorization.  So  these  things  are  not  permitted  without 
authorization.  And  what  we  have  seen  in  the  government's  case  — 
just  solely  looking  at  the  government's  case,  not  considering 
anything  from  the  defense's,  we've  seen  that  there  is  a  lot  of 
difference  of  opinion  as  to  what  was  authorized  and  what  was  not 
authorized. 

MJ:  Well,  isn't  that  a  conflict  in  the  evidence  which  goes  to 

the  fact-finder? 

CDC [MR.  COOMBS]:  True.  But  when  you  —  when  you're  talking 

about  that  just  goes  only  to  the  —  the  issue  of  whether  or  not  this 
was  an  authorized  program.  Whether  or  not  this  was  an  authorized 
program,  as  the  defense  maintains,  doesn't  impact  at  all  on  whether 
or  not  PFC  Manning  might  have  exceeded  his  authorized  access.  The 
unauthorized  program  or  not  is  just  a  use  restriction;  don't  use 
these  types  of  programs.  It's  a  clear  use  restriction  that  John  and 
Rodriguez  case  line  might  say,  hey,  that  —  you  could  exceed  your 
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authorized  access.  But  any  court  following  the  Nosal  line  of  cases 
would  not.  And  this  Court  has  indicated  it's  following  the  Nosal 
line  of  cases. 

MJ:  With  some  caveats. 

CDC [MR.  COOMBS]:  With  the  caveat  that  you  could  have 

something  besides  a  code  or  technical  base  restriction.  But  that 
restriction  then  would  have  to  be  that  an  access  restriction  that's 
clearly  spelled  out,  otherwise,  there's  no  following  the  Nosal 
opinion  because  --  then  that  would  be  the  exception  that  swallows  the 
rule.  If  —  if  any  sort  of  use  restriction  placed  upon  the  computer, 
you  know  —  someone  could  put  in  an  AUP;  only  use  this  computer  if, 
you  know,  if  you  kneel  down  and  say  a  prayer,  and  —  before  you  then 
click  anything  on  the  computer.  And  if  you  fail  to  do  that,  you  have 
now  exceeded  your  authorized  access  --  10-year  offense.  Well,  this 
Court  clearly  would  not  entertain  that  type  of  use  restriction,  nor 
would  any  other  court  following  Nosal.  John  and  Rodriguez  would. 

They  would  say  an  employer  can  contract  the  10-year  violation  in  the 
use  restriction.  So  even  though  the  defense  maintains  that  should  be 
a  code  of  and  —  or  technical  based  restriction  in  order  to  prevent 
going  down  that  slippery  slope,  if  you  are  going  to  go  over  to  you 
can  have  a  verbal  or  written  access  restriction,  then  it  has  to  be  a 
clear  restriction.  It  can't  be  you  used  an  unauthorized  program. 

And  the  best  example  of  this  is  the  Douglas  case  cited  by  the  defense 
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in  its  brief.  And  important  —  two  things  to  —  I  guess  to  point  out 
about  the  Douglas  Hospital  case;  first,  it's  a  civil  case.  And  — 
and  so  obviously  in  a  civil  case  you  kind  of  have  fewer  concerns 
about  loss  of  liberty.  And  even  in  the  civil  case,  the  judge  said, 
no,  this  is  a  use  restriction  that  you're  trying  to  —  to  turn  into 
an  access  restriction,  but  it’s  not  an  access  restriction.  But  the 
second  thing  is  that  this  case  almost  is  our  facts.  It  is  so  on 
point  - 

MJ:  Does  it  involve  classified  information? 

CDC [MR .  COOMBS]:  It  doesn't  involve  classified,  but  —  and 

actually,  that  was  a  question  by  the  Court  in  the  defense's  case,  so 
I  won't  go  on  that.  But  —  but  we  don't  believe  that  that  makes  a  — 
a  difference  because  the  government's  position  in  this  case  is  he 
used  an  unauthorized  program  to  rapidly  harvest  what  he  otherwise  was 
accessed  —  had  authorized  access  to,  but  couldn't  do  by  simple 
click,  open  and  save.  And  in  the  Douglas  Hospital  case  the  idea  was 
you  cannot  —  you  cannot  use  —  and,  in  fact,  in  their  —  and  what 
would  be  the  equivalent  of  their  AUP,  they  specifically  stated  that 
you  are  not  allowed  to  —  to  use  or  download  information  to  an 
unauthorized  storage  devices.  And  in  this  instance  the  doctors  that 
were  charged  under  1030  had  access  to  the  information,  but  they  used 
an  external  hard  drive  in  order  to  save  a  great  deal  of  information 
that  they  otherwise  could  not  have  downloaded.  And  the  exact 
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terminology  in  there  was  they  downloaded  information  they  were 
otherwise  entitled  to  access  onto  an  extraordinary  large  unauthorized 
storage  device.  And  Douglas  Hospital  maintained  that  this  is  a 
violation  of  1030.  And  ultimately  what  the  court  said  is  of  course 
the  distinction  between  an  employer  imposed  use  restriction  and  an 
access  restriction  may  sometimes  be  difficult  to  discern  since  both 
emanate  from  a  policy  decision  by  the  employer  about  decisions  about 
who  should  have  what  degree  of  access  to  employer's  computer  and 
stored  data  once  given  such  access  to  varying  uses  to  which  an 
employee  may  legitimately  put  those  computers  and  data  stored  in 
them.  But  simply  stating  a  limitation  on  access  restriction  is  an 
access  restriction  doesn't  convert  what  is  otherwise  a  use  policy 
into  an  access  restriction.  And  —  and  that's  exactly  what  we  have 
here,  but  we  have  even  a  more  deficient  case  than  the  Douglas 
Hospital  case  because  at  least  in  the  Douglas  Hospital  case  they  had 
the  AUP  to  point  to  and  say  here's  what  the  person  signed.  But  even 
in  that  case  the  court  said,  look,  we're  going  to  reject  the  idea 
that  this  use  restriction  is  somehow  an  access  restriction.  They 
were  entitled  to  access  it,  you  never  limited  that  access,  all  you 
said  was  on  our  storage  devices  —  on  our  —  or  —  excuse  me,  on  our 
computer  system  don't  use  extraordinary  large  storage  devices  without 
previous  authorization.  Much  like  in  this  case,  do  not  use  any  sort 
of  program  without  authorization.  And  whether  or  not  PFC  Manning  had 
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authorization  is  almost  irrelevant.  The  issue  now  is  does  that  use 
restriction  turn  into  an  access  restriction?  And  the  defense 
maintains  that  does  not.  In  fact,  no  criminal  case  that  has  adopted 

the  narrow  view  of  Nosal  where  - 

MJ:  How  many  have? 

CDC [MR.  COOMBS]:  I'm  not  for  sure  —  I'm  good  but  not  that 

good,  ma'am.  I'm  not  sure  of  the  exact  number  - 

MJ:  Ballpark  --  a  lot,  a  little? 

CDC [MR.  COOMBS]:  It  —  it  is  about  a  split-even  now  because 

the  4th  Circuit  —  when  Nosal-1  came  out,  and  Nosal-1  was  more  along 
kind  of  a  John  Rodriguez,  the  4th  Circuit  disagreed,  and  then  Nosal 
en  banc  reconsidered.  It's  still  kind  of  a  split  area.  But  I  —  I 
think  --  the  fundamental  underpinnings  to  —  to  the  1030  concern  is 
notice.  And  —  and  I  think  that  is  —  I  think  that's  where  everyone 
can  kind  of  agree  regardless  of  where  you  come  out  that  a  person  that 
is  using  a  computer  should  have  some  sort  of  notice  that  now  they  — 
they're  potentially  facing  a  10-year  offense.  And  if  there's  simple 
use  restrictions  that  are  put  into  —  usually  like  10  -  15-page 
documents  that,  I'm  ashamed  to  say  as  an  attorney,  I  probably  don't 
read  before  I  signed.  Certainly  Soldiers  don't  read  these  things 
clearly  before  they  sign,  and  yet  when  they  sign  them  --  if  we're 
going  to  say  that  every  one  of  those  use  restrictions  —  because 
there' s  some  of  them  that  are  as  inane  as  you  will  not  use  the 
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computer  unless  you  have  updated  virus  protection  installed.  You 
will  not  use  this  computer  unless  you  have  completed  your  —  all 
required  training.  These  are  some  of  the  really  minor  things  that 
are  in  the  AUP  that  under  the  government's  argument  a  violation  of 
that  —  of  —  if  I  were  using  my  computer  and  didn't  update  my  virus 
protection  consistent  with  AUP  I  just  committed  a  10-year  offense. 
That's  what  the  Drew  case  was  concerned  about.  And  that's  what  many 
of  the  cases  that  follow  Nosal  are  concerned  about. 

MJ:  Well,  didn't  Drew  involve  a  lesser  included  offense  without 

a  mens  rea? 

CDC [MR .  COOMBS]:  It  did.  Your  Honor.  But  that  their  —  their 

main  concern  initially  of  —  of  the  idea  that  you  couldn't  premise 
the  —  the  greater  offense  —  the  1030  offense  that  was  initially  at 
issue  on  the  idea  that  there  is  no  notice  in  this  instance.  And  that 
was  the  constitutional  concern.  But  when  you  look  at  —  at  the  end 
of  the  day,  the  government's  proof,  even  if  —  like  I  said,  even  if 
we  accept  that  —  that  the  program  used  by  PFC  Manning  was 
unauthorized  —  and  let's  even  go  so  far  as  to  accept  that  it  was 
unauthorized  and  that's  exactly  —  and  he  knew  it  was  unauthorized, 
no  one  gave  him  permission,  and  he  used  that  to  download  the  cables. 
The  government  hasn't  proven  at  all  an  access  restriction.  The  — 
they  kind  of  want  to  jump  from  Point  A  to  Point  C  without  doing  Point 
B.  And  B  would  be,  okay,  we're  —  was  it  a  code  or  technical  based 
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restriction  that  it  circumvented?  No.  Okay,  well  then  —  all  right, 
this  Court  will  look  to  AUP  or  perhaps  a  regulation  or  some  other 
command  policy;  do  you  have  one  of  those  things  to  show  me?  No. 
There's  nothing  in  the  middle  there  to  say  that  this  was  an  access 
restriction.  What  they  can  show  you  is  that  it  may  —  may  be 
unauthorized  —  an  unauthorized  program.  And  that  again  is  an 
Article  92.  And  that's  what  - 

MJ:  Well,  isn't  it  whether  it's  an  access  restriction  if  it's  - 

-  isn't  that  a  question  of  fact  for  the  fact-finder? 

CDC [MR.  COOMBS]:  Well,  the  access  restriction  —  I  guess 

whether  or  not  there's  some  evidence  of  it,  yes.  If  there  is  no 
evidence  then  —  the  defense's  position  is  there  has  been  none,  then 
even  though  you  are  the  fact-finder  in  your  judge's  role  now,  that's 
where  the  917  should  be  granted. 

MJ:  So  you  do  agree  that  there  —  the  Court  is  acting  basically 
in  two  different  roles;  in  the  917,  I'm  acting  under  the  standard  of 
the  rule  - 

CDC [MR.  COOMBS]:  Correct,  Your  Honor. 

MJ:  -  which  is  a  low  one.  As  the  fact  —  as  a  fact-finder 

I'm  finding  beyond  a  reasonable  doubt. 

CDC [MR.  COOMBS]:  Exactly,  Your  Honor.  So  —  I  mean,  you 

could  be  a  situation  where  because  of  just  how  low  the  bar  is  for 
917,  the  government  gets  over  that  hurdle,  but  then  hasn't  proven 
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1  beyond  a  reasonable  doubt.  But  even  if  this  instance  they  haven't 

2  gotten  over  the  hurdle  because  there's  been  no  evidence.  There's 

3  nothing  that  they've  offered  the  Court  to  say  that  this  was  an  access 

4  restriction;  no  witness  has  testified  to  that.  And,  in  fact,  all  the 

5  witnesses  from  the  government  have  testified  to  the  contrary.  And 

6  the  most  important  of  which  would  be  Mr.  Wisecarver,  who  would  know 

7  about  access  restriction  because  he's  the  person  they  brought  to  talk 

8  about  the  Net-Centric  Diplomacy  Database.  Or,  you  know,  somebody  — 

9  the  other  person  that  would  be  their  star  witness,  I  guess,  would  be 

10  Captain  Cherepko,  and,  unfortunately  they  couldn't  produce  an  AUP. 

11  But  even  if  they  did  produce  the  AUP,  and  even  if  we  followed  the  AUP 

12  within  25-2,  there's  no  access  restriction  limitation  laid  out  in  25- 

13  2.  So  —  unless  the  defense  wasn't  correctly  understanding  the  — 

14  you  know,  the  first  ruling  and  the  second  ruling  by  the  Court,  you 

15  know,  the  defense  believe  that  you're  following  and  the  Court  still 

16  is  following  the  narrow  view  or  Nosal  with  the  proviso  that  you  could 

17  have  these  access  restrictions  in  other  places,  but  you've  got  to 

18  have  evidence  of  that. 

19  MJ:  All  right.  Thank  you. 

20  CDC [MR.  COOMBS]:  Thank  you.  Your  Honor. 

21  MJ:  Captain  Morrow? 

22  ATC [CPT  MORROW]:  Ma'am,  this  is  admittedly  a  case  of  first 

23  impression.  And  I'd  like  to  draw  the  Court's  - 
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1  MJ:  Before  you  get  there,  let  me  ask  you  a  question. 

2  ATC [CPT  MORROW]:  Sure. 

3  MJ:  Is  the  government  aware  —  and  I  probably  should  have  asked 

4  the  defense  this  —  are  —  is  either  party  aware  of  any  other 

5  1030(a)(1)  offense  involving  classified  information? 

6  ATC [CPT  MORROW]:  No,  Your  Honor. 

7  CDC [MR .  COOMBS]:  Yeah,  there  is  one.  Your  Honor.  I'm  drawing 

8  a  blank  on  it.  But  I  can  look  through  my  notes  and  get  it  for  you. 

9  MJ:  Thank  you.  Yes  [speaking  to  the  Assistant  Trial  Counsel, 

10  Captain  Morrow] . 

11  ATC [CPT  MORROW]:  And  to  begin.  Your  Honor,  I'd  to  just  draw 

12  the  Court' s  attention  to  its  ruling  on  the  renewed  motion;  so  the 

13  second  motion  by  the  defense  to  dismiss  Specification  13  and  14.  And 

14  this  was  cited  in  the  government's  brief  on  this  issue,  but  it  bears 

15  repeating. 

16  [Reading  from  a  document]  Restrictions  of  access  to 

17  classified  information  not  limited  to  code  base  or  technical 

18  restrictions  on  access.  Restrictions  to  access  to  classified 

19  information  can  arise  from  a  variety  of  sources  to  include 

20  regulations,  user  agreements,  and  command  policy.  Restrictions  on 

21  access  can  include  manner  of  access. 

22  In  this  case.  Your  Honor,  the  government's  contention 

23  which,  aside  from  the  initial  ruling  that  the  Court  would  adopt  the 
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Nosal  line  of  cases  versus  the  John  Rodriguez  line  of  cases  is  that 
the  restriction  on  access  in  this  case  was  a  restriction  on  the 
manner  of  access  to  this.  And  we  proffered  a  theory  in  that. 

MJ:  What  is  the  government's  theory? 

ATC [CPT  MORROW]:  Again,  Your  Honor,  the  government's  theory 

is  that  the  —  the  accused  obtained  the  cables  using  an  unauthorized 
program;  Wget.  And  that  theory  was  clearly  laid  out  in  the  — 

MJ:  Was  that  — 

ATC [CPT  MORROW]:  —  brief  on  the  subject.  Yes. 

MJ:  —  did  he  access  the  cables  using  Wget  or  did  he  already 

have  access  to  the  cables  and  used  Wget  to  download  them? 

ATC  [CPT  MORROW]:  Say  that  again.  Your  Honor. 

MJ:  Did  he  use  Wget  to  access  the  cables  or  did  he  have  access 

to  the  cables  and  use  Wget  to  download  them? 

ATC [CPT  MORROW]:  Wget  didn't  —  it  didn't  bypass  some 

firewall  or  something  between  him  and  the  --  and  the  cables.  But 
Wget  was  the  method  of  obtaining  all  the  cables.  And  the  government 
would  point  to  —  defense  cites  Mr.  Wisecarver' s  testimony  for  the 
proposition  that  there  was  no  access  restriction.  And  the  defense 
made  a  point  with  pretty  much  every  government  witness  to  essentially 
play  a  game  of  gotcha  with  the  word  access.  It's  not  as  simple  as 
that.  As  the  Court  noted  in  its  second  ruling  on  this  subject, 
access  and  use  are  not  mutually  exclusive.  When  we  say  "acceptable 
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use  policy",  we're  not  talking  use  of  the  information  as  that's 
essentially  the  defense  position  —  any  time  they  hear  "use"  its,  oh, 
government  now  is  claiming  again  that  they're  relying  on  a 
prohibition  of  the  use  of  the  information.  No.  Acceptable  use 
policy  refers  to  use  of  the  computer.  It's  never  —  it's  never  as  a 
simple  as  that  sort  of  just,  you  know,  they  —  in  this  manner,  in 
this  way,  he  could  go  —  he  could  go  to  the  website,  he  could  click 
on  a  cable,  he  could  download  that  cable,  and  he  could  use  that  cable 
for  whatever.  And  the  government  is,  again,  not  --  we  --  we've 
stepped  away  from  the  theory  —  the  use  theory  as  the  Court 
instructed.  You  know,  that's  not  --  the  Court  was  not  going  to  go 
down  that  road.  But  the  government  has  proffered  another  theory 
consistent  with  Nosal,  which  is  the  most  --  essentially  the  most 
stringent  or  the  most  restrictive  case  on  the  subject  that  included 
the  holding  that  restriction  of  access  can  include  the  manner  of 
access  to  the  information. 

MJ:  What  is  the  government  —  is  --  what  is  the  government's 

position  on  whether  Wget  was  authorized  or  not? 

ATC [CPT  MORROW]:  The  government's  position  is  that  Wget  was 

absolutely  unauthorized.  And  I  believe  - 

MJ:  And  the  government  believes  sees  no  conflict  in  the  —  in 
the  testimony? 

ATC [CPT  MORROW]:  When  you  parse  it  out,  we  didn't  see 
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conflict  because  the  government's  position  is  what  the  defense  has 
cited  as  conflict,  which  is  that  there  were  music  --  people  used 
music,  movies,  and  games,  or  that  people  used  mIRC  chat.  Those  are, 
in  the  defense's  words,  red  herrings. 

MJ:  Why? 

ATC [CPT  MORROW]:  We're  not  —  we're  not  talking  about  music, 
movies,  and  games.  And  the  defense  has  —  in  those  cases  has  a 
colorful  argument  that  if  we  were  charging  PFC  Manning  with  the 
loading  of  unauthorized  music  on  his  computer,  then  we  would  have  a 
problem  because  it  appears  that  the  command  had  a  at  least  unwritten 
policy  that  it  was  okay  to  listen  to  music  on  your  computer. 

MJ:  What  is  the  difference  and  where  is  the  evidence  the 

government  presented  between  Wget  and  a  music  file?  Are  they 
executable  files?  Or  are  they  different  in  some  respect  other  than 
one  plays  music  and  the  other  doesn't? 

ATC [CPT  MORROW]:  Well,  again,  the  difference  between 

executables  and  software  is  also  a  red  herring.  As  Special  Agent 
Shaver  clearly  testified  that  an  executable  is  software;  they  are  one 
in  the  same. 

MJ:  Are  both  prohib  —  what  —  what  does  AR  25-2  prohibit? 

ATC [CPT  MORROW]:  I  believe  pro  --  I  believe  25-2  prohibits, 

you  know,  executable  software,  freeware,  which  is  something  you  might 
get  off  the  internet,  and  programs.  I'd  have  to  go  back  and  look 
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specifically  at  the  provisions  of  25-2,  but  I  believe  that's  what  — 
that's  how  it's  articulated.  Additionally,  Your  Honor,  the 

government's  position  - 

MJ:  I  guess  that's  where  I'm  - 

ATC [CPT  MORROW]:  Sorry. 

MJ:  -  just  —  if  AR  27-2 [sic]  prohibits  executable  files  and 

programs,  and  there's  evidence  that  executable  files  and  programs  are 
routinely  allowed  in  —  by  the  unit  on  the  DCGS-A  computer,  what's 
the  —  where  I'm  —  what's  the  difference  between  a  song  and  Wget? 

ATC [CPT  MORROW]:  Well,  Your  Honor,  I  —  I  —  the  government's 

position  is  that  music  is  not  an  executable  file.  I'm  not  sure  where 
that - 


MJ:  Oh,  what  about  movies? 

ATC [CPT  MORROW]:  What's  that? 

MJ:  Movies? 


ATC [CPT  MORROW]:  I  don't  believe  movies  are  an  executable 


file  either.  But. 

MJ:  And  where's 

ATC [CPT  MORROW] : 
Your  Honor. 

MJ:  Okay 

ATC [CPT  MORROW] : 
there  was,  in  fact,  a 


the  evidence  that  we  heard  of  that? 

I'm  --  I'd  have  to  get  back  to  you  on  that. 


Again,  you  know,  the  distinction  is  —  if 
command  policy  essentially  because  they  were  in 
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a  deployed  environment  and,  you  know.  Colonel  Miller  specifically 
stated,  hey,  I  want  people  to  be,  you  know,  to  use  whatever  it  — 
whatever  is  within  their  essentially  possession  to  remain  vigilant 
and  interested  in  the  work.  And  if  one  of  those  things  was  listen  to 
music  while  doing  their  work,  that  didn't  seem  to  be  something  that 
he  had  a  problem  with.  But,  again,  that's  different  than  an 
executable  file  that  in,  you  know,  several  witnesses  testified  about 
what  Wget  actually  does,  including  Chief  Rouillard,  Special  Agent 
Shaver,  Mr.  Weaver,  Captain  Cherepko.  And  the  government's  position 
is  that  they  essentially  all  articulated  reasons  why  it  would  be 
entirely  appropriate  to  treat  Wget  differently  than  every  other  file, 
program,  or  piece  of  software  that  has  come  up  in  this  case. 

MJ:  What  were  those  reasons? 

ATC [CPT  MORROW]:  I  refer  you  to  the  government's  brief  on 

this  case.  Your  Honor.  But  I'll  just  highlight  it  here.  [Reading 
from  a  document]  The  testimony  of  Chief  Rouillard  stating  that  he 
used  Wget  in  his  OPFOR  capacity  for  attacking  the  Army  network,  and 
he  was  specifically  authorized  to  install  Wget.  Wget  is  only  for 
individuals  who  are  penetration  testers  and  OPFOR.  Testimony, 
especially  in  Shaver,  Wget  downloaded  information  faster  than  humanly 
possible.  Testimony  of  Captain  Cherepko;  Wget' s  - 

MJ:  What  difference  does  that  make? 

ATC [CPT  MORROW]:  Whether  it  downloads  information  faster? 
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MJ:  Yes. 

ATC [CPT  MORROW]:  I  believe  it  makes  a  difference  on  the 

SIPRNET,  Your  Honor.  That's  sort  of  why  we  are  here  today. 

MJ:  Well,  what  about  the  testimony  we  heard  earlier  that  it  was 

—  the  computers  crashed  and  it  was  perfectly  fine  to  download  on 
classified  CDs  in  the  SCIF? 

ATC [CPT  MORROW]:  Your  Honor,  that's  a  theory  put  forth  by  the 

defense.  And  I  don't  believe  there's  any  evidence  that  people  were 
using  CDs  as  back-up  systems.  That  was  something  raised,  and  I  don't 
believe  anyone  else  said  they  used  —  they  put  their  entire  computer 
on  a  CD  to  back  it  up.  Or  any  information  - 

MJ:  Well,  I  don't  think  anybody  said  - 

ATC [CPT  MORROW]:  -  that  was  otherwise  available. 

MJ:  -  I  don't  think  anybody  said  that  either. 

ATC [CPT  MORROW]:  What's  that,  Your  Honor? 

M J :  But  --  I  don't  think  anyone  said  that  either.  Was  there 
not  testimony  that  there  was  no  prohibition  about  downloading  on  CDs 
so  long  as  they  stayed  in  the  SCIF  and  were  properly  marked? 

ATC [CPT  MORROW]:  No,  I  believe  that's  true.  If  —  if  —  no 

prohibition,  but  the  reason  for  downloading  CDs  was  to  —  for  foreign 
disclosure  operatives  to  burn  information  to  CDs  in  order  to  --  to 
release  classified  information  to  their  Iraqi  counterparts; 
classified  information  that  was  releasable  to  Iraqis,  that  had  been 
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vetted  from  the  —  the  —  you  know,  in  the  system,  down  from  the 
Division  level  to  the  brigade.  But  that  was  a  specific  reason  why  — 
and  —  obviously  —  I  mean  —  I'm  sure  that  in  the  SCIF,  if  you  — 
you  know,  you  have  a  file  and  need  to  burn  classified  information  in 

the  course  of  your  working,  and  hand  it  to  another  analyst  in  the  S- 

2,  I  —  there  was  nothing  specifically  prohibiting  that  in  the  course 
of  your  work. 

MJ:  'Cause  —  could  Wget  be  almost  beneficial  if  you  had  to 

download  for  an  official  reason? 

ATC [CPT  MORROW]:  I'm  not  —  I  don't  —  I  don't  necessarily  — 

well.  Special  Agent  Shaver  testified  that  he  used  in  the  course  of 
his  —  this  case,  and  I  believe  Special  Agent  —  I  don't  want  to  get 
into  what  he  would  say,  but  he  used  it  because  he  was  trying  to 
replicate  the  process  by  which  PFC  Manning  did  something.  And, 

again,  that' s  sort  of  consistent  with  what  Chief  Rouillard  said  about 

Wget,  which  is  that  he  uses  it  as,  you  know,  in  the  course  of  his 
work  as  somebody  who's  doing  penetration  testing,  you  know, 
attacking  the  Army  network,  not  necessarily  using  it  for  all  the 
reasons  that  might  be  useful  in  other  content. 

With  respect  to  the  Douglas  case.  Your  Honor,  just  one 
piece  of  that.  I  believe  that  —  again,  that  case  isn't  addressing 
the  manner  of  access  or  manner  of  detainment,  it  addresses  the  manner 
of  the  storage  of  the  information,  which  is,  again,  —  that's  why 
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that  court  specifically  was  a  —  they  determined  that  under  those 
facts  that  was  a  prohibition  on  the  using  the  information,  not  the 
manner  in  which  they  obtained  the  information. 

MJ:  Well,  what's  the  different  between  that  case  and  this  case, 

other  than  it's  a  civil  case  not  involving  classified  information?  I 
mean,  what's  the  government's  argument  as  to  why  I  should  not  draw 
the  same  distinction? 

ATC [CPT  MORROW]:  Because  that  case  involved  the  storage  of 

information.  It  wasn't  the  method  of  obtaining  the  information.  It 
was  merely  - 

MJ:  The  method  of? 

ATC [CPT  MORROW]:  -  the  method  of  obtaining  the  information 

or  accessing  the  information.  It  was  the  method  of  storing  the 
information  later. 

MJ:  Back  to  my  original  question;  did  the  accused  use  Wget  to 
access  the  cables  or  did  he  already  have  access  to  them  and  use  Wget 
to  pull  them  out? 

ATC [CPT  MORROW]:  Well,  it  was  run  —  I  mean,  you  could  say 

that  —  I  believe  you  could  say  that  he  did  use  Wget  to  access  the 
information  because  he  ran  it  from  his  desktop.  It  was  a  --  it  was  a 
program  that  was  run  from  his  desktop.  It  was  under  his  user  name, 
bradley. manning,  and  then  it  —  once  he  ran  the  script  it  went  out 
onto  the  SIPRNET  and  grabbed  the  information  or  scrapped  the  website. 
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Again  —  I  mean,  the  government  wouldn't  contend  that  there  was  any 
firewall  that  Wget  prevented  or  that  Wget  circumvented,  nor  does  the 
case  law  require  that. 

MJ:  Your  counterpart  just  stood  up. 

TC [MAJ  FEIN]:  Could  I  have  a  moment.  Your  Honor? 

MJ:  Yes.  That  would  be  Major  Fein  for  the  record. 

[Pause] 

ATC [CPT  MORROW]:  What  the  evidence  has  shown.  Your  Honor,  is 

that  there  wasn't  a  method  for  downloading  cables  in  batch  from  the 
NCD  website  in  batch.  And  that  was  clearly  from  —  that  was  clear 
from  Mr.  Wisecarver' s  testimony. 

MJ:  So  the  evidence  has  shown  there's  not  a  procedure? 

ATC [CPT  MORROW]:  That  there  wasn't  a  procedure  —  that  there 

wasn't  any  other  mechanism  in  which  to  download  cables  in  bulk  like 

there  was,  for  example  —  and  this  is  raised  in  the  defense  motion  in 
the  CIDNE  database,  there  was  a  method  to  download  significant 

activity  reports  in  batches.  So  in  —  sent  in  monthly  batches  once  - 

-  you  could  export  all  SIGACTS  to  an  Excel  file.  That  was  a  method  - 

-  that  was  something  that  was  in  the  system  that  allowed  that  sort  of 
bulk  downloading.  There  was  not  a  comparable  method  of  obtaining  a 
large  number  of  cables  from  the  NCD  system. 

MJ:  Was  there  a  prohibition  for  bulk  downloading? 

ATC [CPT  MORROW]:  A  prohibition  —  a  —  explicit  prohibition? 
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MJ:  Yes. 

ATC [CPT  MORROW]:  No.  But  the  government  would  argue  the  — 

that  by  virtue  of  the  lack  of  a  design  feature  in  NCD  that  is  an 
implicit  prohibition. 

MJ:  What  is  the  government's  view  of  Wget?  What  kind  of  a 
program  executable  —  whatever  software  it  is  —  and  how  it  got  on 
PFC  Manning's  computer  and  where  it  was? 

ATC [CPT  MORROW]:  The  evidence  has  shown  that  the  program  was 

on  his  desktop  under  his  user  profile.  It  was  not  run  from  a  CD.  It 
was  under  the  --  his  user  name;  bradley .manning  both  times.  When  he 
redownloaded  it,  May  4th  or  May  3rd,  and  moved  it  to  his  SIPRNET 
computer,  it  was  under  his  —  on  his  desktop  or  under  his  program  — 
under  his  profile.  And,  again,  when  it  was  running  in  the  March 
timeframe  it  was  running  —  the  evidence  showed  that  it  was  in  the 
pre-fetch  files,  which  is  --  it  was  in  essentially  under  his  user 
name  or  his  profile. 

MJ:  And  I  find  that  evidence  where? 

ATC [CPT  MORROW]:  The  testimony  of  Special  Agent  Shaver. 

MJ:  So  if  I'm  understanding  the  government's  position 

correctly;  that  was  —  Wget  was  a  program  —  was  it  introduced? 

ATC [CPT  MORROW]:  It  was  introduced  onto  his  computer  both  — 

on  both  occasions. 

MJ:  How? 
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ATC [CPT  MORROW]:  The  government's  theory  is  that  he 

downloaded  —  well,  it  was  downloaded  both  times  from  the  NIPRNET, 
put  onto  a  CD  and  moved  over  to  is  SIPRNET  computer.  And  if  you 
recall.  Special  Agent  Shaver  —  the  second  time  we  can  show 
essentially  the  time  it  was  downloaded  on  the  NIPRNET  computer,  and 
he  should  —  remember  he  —  he  was  talking  about  the  NIPRNET  computer 
and  the  Internet  Explorer  —  Explorer  history,  he  said  I  can  see  by 
this  line,  you  know,  I  know  it  was  downloaded.  He  then  --  so  he  saw 
it  download  a  NIPRNET  computer,  and  then  he  saw  it  appear  under 
bradley .manning  profile,  I  believe,  either  minutes  or  an  hour  later 
or  so.  He  knows  it's  the  same  file  cause  of  the  hash  values  match. 

MJ:  What,  if  any,  distinction  does  the  government  see  in 

running  a  program  or  an  executable  file  from  a  CD  and  running  it  from 
a  user  profile? 

ATC [CPT  MORROW]:  In  this  case,  Your  Honor,  I  don't  think 

there's  a  distinction  for  purposes  of  1030.  There  may  be  a 
distinction  with  respect  to  the  specifications  in  Charge  III  that 
allege  introducing  software  on  the  computer. 

MJ:  With  respect  to  authorized  versus  unauthorized? 

ATC [CPT  MORROW]:  Whether  it  was  authorized  to  run  from  a  CD? 

MJ:  Yes. 

ATC [CPT  MORROW]:  That's  part  of  our  —  I  think  Captain 

Overgaard  will  address  that  in  our  rebuttal  case,  but  our  contention 
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is  that  that  —  that  was  not  what  was  authorized  --  Mr.  Milliman  did 
not  authorize  that. 

MJ:  Okay. 

ATC [CPT  MORROW]:  Subject  to  your  questions. 

MJ:  I  have  one  more. 

ATC [CPT  MORROW] :  Okay. 

MJ:  Assume  that  the  DCGS  —  Mr.  Milliman  and  the  other  people 

involved  with  the  DCGS  computers  say  these  kinds  of  programs  are  not 
authorized.  And  the  person's  chain  of  command  either  says,  yes,  they 
are,  or,  I  suppose,  tolerates  them  being  on  the  machines  despite  the 
DCGS-A  prohibition.  Are  those  programs  authorized  or  not  authorized? 

ATC [CPT  MORROW]:  Our  position.  Your  Honor,  was  that  —  is 

that  in  the  case  of  the  DCGS-A  computers,  which  were  owned  by  —  they 
were  —  it  was  theater  owned  equipment,  not  owned  by  the  unit,  that 
the  —  Mr.  Milliman' s  authority  would  control. 

MJ:  And  that  would  be  true  for  junior  Soldiers  notice  that  it 

was  authorized  or  not  authorized  or  does  that  make  any  difference? 

ATC [CPT  MORROW]:  I  believe  several  witnesses  —  I  don't 

believe  that  makes  a  difference.  Your  Honor,  but  several  witnesses 
testified  that,  you  know,  everyone  knew  that  Mr.  Milliman  was  the  guy 
to  approach  for  anything  having  to  do  with  the  DCGS-A  computers;  he 
was  your  man.  He  was  the  field  FSE,  Field  Support  Engineer,  I 
believe. 
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MJ:  Okay.  Thank  you.  I  think  I've  asked  all  my  questions. 

Oops,  before  —  oops,  I  didn't  —  Captain  Morrow,  I  got  one  more. 

I'm  sorry  about  that. 

ATC [CPT  MORROW]:  Oh,  darn  it. 

MJ:  What  is  the  relevance  of  the  Department  of  State  banner? 

ATC [CPT  MORROW]:  That  was  just  to  clarify  some  evidence  that 

had  come  in  through  Mr.  Wisecarver  where  it  —  it  talked  about  how  it 
wasn't  access  --  it  wasn't  a  banner  that  related  to  the  use  of  the 
information.  The  government  merely  points  out  that  was  a 
mischaracterization  of  the  evidence  by  accused  or  by  the  defense. 

The  use  in  that  banner  clearly  refers  to  use  of  the  system  itself, 
not  to  the  use  of  the  information. 

MJ:  Thank  you.  Mr.  Coombs? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

ATC [CPT  MORROW] :  The  computer  being  server. 

CDC [MR.  COOMBS]:  Just  based  upon  the  Trial  Counsel's 

statement,  just  a  couple  of  issues;  Douglas  was  a  manner  of  access 
case  because  the  manner  of  access  was  --  accessing  the  --  these 
materials  with  the  external  hard  drive  —  that's  —  that's  how  they 
accessed  the  materials  and  then  downloaded  and  saved  them.  So  it's  a 
—  it's  a  manner  of  access  case.  Music  is  a  violation  of  25  —  25-2 
as  well  on  a  computer  system,  as  well  as  movies  and  games.  And  we 
did  have  witness  testimony;  Captain  Cherepko  talked  about  the  dangers 
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of  that  from  his  position  and  that  being  either  the  music,  movies,  or 
games  could  have  a  virus  contained  within  them  that  would  make  the 
system  susceptible  to  infiltration.  The  government  talks  about  the 
limitations  of  the  Net-Centric  Diplomacy  Database  as  far  as  its  kind 
of  programming  limitations,  I  guess,  of,  in  their  view,  it  didn't 
have  a  batch  or  a  rowbal  [phonetic]  type  function.  The  limitations 
of  a  particular  program  do  not  entail  the  access  restrictions  of  that 
program.  And  we  see  that  all  the  time  when  you  --  when  you  use  one 
program  on  your  computer  to  accentuate  another  such  as  —  probably  an 
easy  example  would  be  Word.  I  mean.  Word  doesn't  have  the  ability  to 
PDF  a  document,  but  PDF  has  the  ability  to  grab  a  Word  document  and 
PDF  it.  So  just  because  a  particular  program  might  not  have  a 
particular  feature  to  it,  does  not  without  more  indicate  that  that's 
an  access  restriction. 

With  regards  to  the  banner,  you  know,  we  —  we  covered  the 
banner.  I  didn't  put  Mr.  Wisecarver  on  the  spot,  but  I  just  wanted 
to  know  anything  in  that  banner  indicate  access  restrictions.  And  — 
and  he  said,  no.  So  our  position  —  we  really  don't  —  we're  not 
concerned  about  use  restrictions;  we're  concerned  about  access 
restrictions  for  the  purposes  of  1030. 

So  he's  —  he  indicated  that  there  were  no  access 
restrictions  on  the  Net-Centric  Diplomacy  Database.  That  instead 
they  relied  upon  the  receiving  agency  to  place  any  sort  of 
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1  restrictions.  So,  again,  if  you  had  access  to  SIPRNET,  you  had 

2  access  to  the  Net-Centric  Diplomacy  Database. 

3  With  regard  to  how  the  Wget  was  on  PFC  Manning's  computer; 

4  I  think  they  —  Trial  Counsel  cleared  up  that,  yeah,  that  had  to  be 

5  from  a  CD.  And  then  we  heard  testimony  that  you  could  run  an 

6  executable  from  a  CD  and  —  or  you  could  put  a  shortcut  on  your 

7  desktop.  And  the  shortcut  on  the  desktop  could  be  the  program.  But 

8  you  couldn't  add  it  to  the  - 

9  MJ:  Well,  the  CD  would  still  have  to  be  in  place,  right? 

10  ATC [CPT  MORROW]:  Your  Honor,  I  believe  the  —  sorry. 

11  MJ:  Let  him  answer  my  guest ion  then  I'll  get  to  you. 

12  CDC [MR.  COOMBS]:  Yeah.  The  --  I  think  there  might  be  a 

13  hybrid  of  three  ways;  that  you  could  have  it  as  —  you  know,  so  you 

14  have  the  executable  program  that  you  can  put  on  your  desktop  'cause 

15  you're  not  adding  it  to  the  baseline  programs.  And  we've  heard 

16  testimony  that  you  would  have  to  admin'  privileges  to  do  that.  But 

17  for  your  user  profile,  you  could  save  things  to  your  desktop.  So  you 

18  could  put  it  on  your  desktop,  if  you  wanted.  You  could  put  a 

19  shortcut  on  your  desktop  that  would  link  to  the  CD.  So,  I  guess,  if 

20  you  had  it  in  your  CD  and  you  clicked  the  shortcut,  it  would  just  run 

21  it.  Or,  what  you  could  do,  if  you  didn't  have  a  shortcut,  is  open  on 

22  your  computer,  my  computer,  and  then  see  the  CD  drive,  double  click 

23  that  and  then  double  click  the  executable.  So,  I  think  there  may  be 
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three  ways  that  one  could  run  an  executable,  but  from  the  defense's 
position  there  —  there  really  isn't  any  distinction  between  the 
three.  They're  all  run  the  same  way. 

MJ:  And  that  includes  transferring  from  the  CD  to  your  user 

profile? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  I  —  I  think  - 

MJ:  And  there's  no  admin'  rights  that  —  well,  what  —  the 

evidence  was  there  admin'  rights  required  for  that  or  not? 

CDC [MR.  COOMBS]:  No  admin'  rights  for  the  user  profile,  but 

you  couldn't  add  programs  as  far  as  to  the  baseline  package  of  the 
computer.  And  that's  why  —  it's  perplexing  why  the  government  makes 
it  a  point  that  it's  on  its  user  profile,  but  another  user  of  that 
same  computer  couldn't  see  it  'cause  it  —  you  know,  it  wasn't  part 
of  the  main  programs;  it  was  only  on  PFC  Manning's  user  profile  --  as 
if  that's  somehow  nefarious.  But  that's  —  that's  the  only  way  you 
could  —  you  could  do  it  because  you  didn't  have  the  ability  to  add 
it  to  the  baseline  programs  where  other  user  could  see  it.  So  you 
only  —  it's  kind  of  like  for  that  matter,  like  if  we  had  multiple 
users  on  your  computer,  ma'am,  each  with  a  password,  if  you  saved  a 
particular  Word  document  on  your  user  profile  I'm  not  going  to  be 
able  to  see  it  when  I  login  because  it's  not  on  the  whole  computer's 
files.  So  I  just  don't  see  a  —  although  the  government  made  it  an 
issue,  I  don't  see  that  as  it  being  an  issue. 
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Then,  finally,  Mr.  Milliman  testified  that  he  did,  in  fact, 
see  things  on  the  DCGS-A  computers  that  weren't  supposed  to  be  there. 
And  he  testified  that  he  couldn't  order  Soldiers  to  take  it  off 
because  they  didn't  work  for  him.  So  there  —  there's  this  kind  of 
pull/push  on  who  actually  has  the  final  say  on  the  computers.  And 
Mr.  Milliman  talked  about  the  fact  that  initially  units  thought  the 
computers  were  theirs,  they  would  try  to  crack  the  password,  he  would 
have  school  them  up  on,  hey,  these  are  not  computers.  And  then 
ultimately,  you  know,  sometimes  he  would  see  stuff,  but  he  couldn't 
order  the  Soldiers  to  take  it  off.  But,  again,  he  was  the  final  say 
for  putting  new  programs  on.  And  if  he  couldn't  --  well,  he  was  the 
initial  person  they  had  to  go  to,  and  if  he  didn't  have  the 
authorization  or  didn't  know  then  he  would  go  up  the  chain  in  order 
to  get  authorization.  So  subject  to  your  questions.  Ma'am. 

MJ:  Does  the  government  have  any  clarifications? 

ATC [CPT  MORROW]:  The  reason  I  stood  up.  Your  Honor,  I  don't 

believe  any  evidence  was  introduced  in  the  government's  case  in  chief 
relating  to  the  running  of  executables  from  a  CD.  So  I  know  we've 
gotten  sort  of  into  that  as  part  of  this  discussion,  but  for  purposes 
of  917,  it  really  shouldn't  be  a  consideration. 

CDC [MR .  COOMBS]:  I  actually  think  that  evidence  came  from 

Captain  Cherepko.  I  can  double-check.  But  I  believe  Captain 
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Cherepko  talked  about  the  ways  in  which  an  executable  file  could  be 
run. 

MJ:  Well,  let  me  ask  you,  government,  once  again,  what  —  the 

defense  described  three  ways  that  a  program  —  you  had  to  have  --  if 
I'm  understanding  what  the  evidence  has  said  correctly  and  what  the 
parties  are  arguing,  if  a  program  had  to  be  installed  on  the  portion 
of  the  computer  that  was  accessible  to  everyone  there  had  to  be 
administrative  rights.  Now  what  about  a  program  just  installed  or 
added  to  your  own  user  profile? 

ATC [CPT  MORROW]:  Added  to  your  own  user  profile  there  didn't 

have  to  be  administrator  rights.  But  the  reason  that  that  was 
pointed  out  in  the  government's  brief  was  that  indicates  that  neither 
PFC  Manning  nor  anyone  else  approached  the  administrator,  Mr. 
Milliman,  to  put  this  under  —  make  this  program  —  this  apparently 
very  useful  program,  accessible  to  everyone  who  could  use  the 
computer. 

MJ:  Was  there  evidence  presented  that  Soldiers  had  to  do  that? 

I  mean,  if  they  were  —  if  you  had  to  go  through  Mr.  Milliman  to  get 
a  program  installed  on  the  DCGS-A  computer  that  would  accessible  to 
everyone,  however,  there  were  no  administ  —  well,  first  of  all,  let 
me  ask  the  government,  what's  the  government's  view  of  the  evidence 
to  add  a  program,  be  it  Wget  or  anything  else,  to  your  user  profile, 
what,  if  any,  technical  restrictions  were  there  in  doing  that? 
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ATC [CPT  MORROW]:  To  run  a  program  like  Wget  —  Wget  as  an 

executable  file  could  be  added  to  —  and  I  believe  not  every 
executable  file  necessarily  can  be  done  this  way,  but  at  least  with 
respect  to  Wget,  it  could  be  added  to  the  computer  without  having 
administrator  privileges. 

MJ:  And  did  Mr.  Milliman  or  anyone  else  testify  that,  yes,  you 

have  to  go  through  DCGS-A  personnel  to  add  programs  to  the  overall 
general  group,  but  what  about  ind  —  programs  to  your  own  individual 
user  profile  that  don't  require  administrative  rights? 

ATC [CPT  MORROW]:  I  don't  think  there's  a  distinction  there. 

Your  Honor.  It's  introducing,  be  it  software,  executable,  whatever, 
introducing  something  to  the  DCGS-A  machine.  That's  —  that's  the 
inquiry. 

MJ:  I  don't  want  to  get  too  far  afield  here,  but  if  there  are 

administra  —  if  administrative  privileges  are  required  to  install 
something  on  the  general  overall  computer,  was  there  some  reason  they 
weren't  required  to  install  programs  on  user  profiles? 

ATC [CPT  MORROW]:  I'm  sorry.  Say  that  again. 

MJ:  Again,  I  don't  want  to  get  too  far  afield  here. 

ATC [CPT  MORROW]:  Okay. 

MJ:  But  there  —  to  install  something  on  the  T-drive  or 

someplace  accessible  to  all  of  the  members  of  the  unit  - 
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ATC[CPT  MORROW] :  Right. 

MJ:  -  require  administrator  privileges,  would  it  —  why 

didn't  —  why  wasn't  there  any  technical  restriction  then  to  adding 
programs  to  user  profiles? 

ATC [CPT  MORROW]:  I  don't  believe  there  was  administrator  — 

T-  drive  is  essentially  a  share  drive.  Your  Honor.  So  anything  — 
any  file  could  be  added  by  anyone  to  the  T-drive. 

MJ:  Okay,  well,  how  would  you  add  one  then  to  —  that  can  be 

used  by  everybody  —  the  one  that  required  administrative  rights? 

ATC [CPT  MORROW]:  Well,  it  depends  how  —  I  think  we  probably 

are  getting  a  little  far  ahead,  but  it  depends  on  how  the  program 
operates;  whether  it's  something  that  needs  —  whether  it  operates  as 
an  executable  or  whether  it  operates  essentially  a  traditional 
program,  which  would  have  to  be  installed  on  the  computer.  And 
usually  the  installation  of  something  like  that  requires  the 
administrator  privileges  because  it  operates  with  the  —  I'm  not  a 
computer  expert,  but  it  operates  with  the  system  itself  in  a  way  that 
executables  don't.  I'll  just  defer  to  Major  Fein  or  Major  Fein;  he's 
more  of  a  computer  expert  than  I  am. 

TC [MAJ  FEIN]:  Ma'am,  the  testimony  this  Court  has  heard  is 
first  from  Special  Agent  Shaver,  who  distinguished  the  difference 
between  a  regular  program  that  installs  on  a  computer.  He  said  that 
there's  a  bunch  of,  I  think  his  term  was  "libraries",  and  those 
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libraries  install  for  all  users  to  use.  And  you  have  to  have 
administrator  access  for  that.  You  also  heard  testimony  from  Special 
Agent  Shaver  that  said  a  self-executable  is  self-contained  file  that 
has  all  that  information  contained  within  it.  And  then  could  be  run 
from  any  location  where  its  put  either  on  a  CD  --  could  be  —  or  as 
the  defense  witness  has  —  did  testify  about,  and  then  —  or  in  a 
user  profile. 

To  answer  your  original  question  to  Captain  Morrow,  you 
said  what  restrictions  —  physical  limitations  would  there  be  for  an 
individual  who  doesn't  have  administrator  rights.  You  heard  from  Mr. 
Weaver,  his  testimony  was  is  that  it  is  impossible  to  come  up  with  a 
policy,  both  on  a  computer  itself  and  a  policy  within  an  Army 
regulation  that  captures  every  possible  scenario  of  installing  every 
type  of  file  from  a  Word  document  to  a  .EXE,  and  it  takes  individual 
responsibility  of  following  the  rules  and  not  installing  programs. 
What  everyone  has  testified  about  is  that  Wget  was  a  program;  self¬ 
executable  program.  And  then  from  Special  Agent  Shaver's  testimony 
it  was  found  on  his  desktop.  So  that  could  be  —  we  could  use  the 
word  "install",  but  really  what  that  means  is  moved;  the  file  was 
located  on  his  desktop.  And  because  Shaver's  testimony  was  it's  a 
self-contained  single  file  —  it  is  Wget.exe,  it  is  one  file  that  can 
moved.  So  an  individual  is  restricted  —  this  is  what  Mr.  Weaver 
testified  about;  an  individual  is  prohibited  under  the  reg'  to 
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introduce  software  that  they  are  not  authorized  to  introduce.  That's 
an  introduction  prohibition,  and  that's  what  Mr.  Weaver  testified 
about.  And  so  that  would  be  the  two  difference  —  although  there's 
no  technical  restriction,  it  is  still  a  violation  of  the  regulation 
to  introduce  a  program. 

MJ:  What  is  the  difference  between  introducing  Wget  and 

introducing  a  movie? 

TC [MAJ  FEIN]:  Well,  ma'am,  first  off,  a  movie  is  not  a  program. 
And  the  defense  has  presented  no  evidence,  and  there  was  definitely 
no  evidence  prior  to  the  end  of  the  917  that  a  movie  is  an  executable 
or  that  a  —  or  that  a  video  is  —  excuse  me,  a  video  and  movie  — 
music  are  executables.  What  you  did  hear  testimony  on  is  that  there 
was  program  called  VLC;  a  movie  and  music  player  —  a  player  to  play 
movies  and  music.  So  movies  and  music  are  not  executables.  Wget 
was.  And  that's  in  the  testimony  of,  again,  of  Special  Agent  Shaver, 
Chief  Rouillard,  and  others. 

MJ:  A  VLC  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  is  that  something  a  Soldier  can  introduce  through 

either  CD  or  put  on  his  user  profile  without  administrative  rights? 

TC [MAJ  FEIN]:  Ma'am,  I  could  answer  that  question,  but  there 
has  been  no  evidence  presented  in  this  Court  for  917  that  answers 
that  specific  question. 
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MJ:  No  witness  testified  about  that  issue? 

TC [MAJ  FEIN]:  Correct,  ma'am. 

MJ:  Okay. 

TC [MAJ  FEIN]:  But  if  Court  would  like  an  answer,  I  can  answer 

that . 

MJ:  Well,  I'm  —  I'm  basing  what  I  have  based  on  the  evidence. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  So,  no. 

TC [MAJ  FEIN]:  So  —  but,  no,  ma'am.  So  that  has  not 
necessarily  been  answered.  There  was  testimony  in  the  defense's  case 
about  what  was  on  CD.  But,  again,  that's  not  for  purposes  of  a  917. 
But  it  —  but  what  was  testified  about  was  VLC  is  a  movie  player; 
movies  and  music  —  movie  and  music  player,  and  those  are  not 
programs . 

MJ:  Okay.  Thank  you.  Defense,  your  motion;  any  final  words? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  Just  with  regards  to  the 

idea  of  an  explicit  or  implicit  prohibition  for  adding  shortcuts  or 
adding  programs,  the  explicit  prohibition,  that's  —  that  kind  of 
goes  back  to  the  defense's  entire  position  on  this,  that  the 
government  hasn't  —  regardless  of  how  you  view  Wget,  the  government 
hasn't  offered  any  sort  of  access  restriction  —  evidence  of  the 
access  restriction  for  the  cables  in  this  instance.  What  they  relied 
upon  is,  well,  you  should  know  if  you  are  using  a  not  authorized 
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1  program  that  that's  an  implicit  access  restriction.  And  here  that 

2  goes  again  back  to  the  Nosal  line  of  cases  that  if  you're  going  to 

3  premise  a  10-year  offense  on  something,  the  notice  requirements  are 

4  that  you  need  to  inform  the  individual  of  the  access  restrictions  but 

5  --  what  they  are  not  allowed  to  do  or  go  to.  And  in  this  case, 

6  regardless  of  whether  or  not  it's  an  unauthorized  program  or  not,  it 

7  was  not  an  access  restriction  for  the  Net-Centric  Diplomacy  Database. 

8  So  really  the  last  bit  of  the  government's  argument  is  going  to  be 

9  relevant  to  the  Article  92  offenses,  as  opposed  to  the  offenses 

10  regarding  1030.  We  do  have  evidence  of  executables  being  put  on  the 

11  desktop  other  than  Wget;  and  that's  mIRC  chat.  And  those  executables 

12  by  Specialist  Showman  and  Sergeant  Madaras  say  the  person  that  put  it 

13  on  their  computer  is  PFC  Manning  —  a  newer  version  of  that  without 

14  Mr.  Milliman.  And  then  we  again  have  evidence  of  Mr.  Milliman  saying 

15  that,  look,  I  —  I  saw  stuff  that  was  unauthorized,  but  I  was  not  in 

16  position  to  tell  the  Soldiers  what  to  do  because  they  didn't  work  for 

17  me.  So  even  though  Mr.  Milliman  might  have  been  the  civilian 

18  contractor  that  owned  the  computers,  his  testimony  was  that,  yeah,  I 

19  controlled  what  was  put  on  from  a  program  standpoint  —  the  big 

20  picture  program  standpoint,  but  I  couldn't  control  what  Soldiers  put 

21  on  their  desktop.  And  that's  where  Captain  Cherepko's  testimony 

22  comes  into  play  of  seeing  different  things  on  the  T-drive  and 

23  apparently  on  other  Soldiers'  computers  where  he  was  advising  the 
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Soldiers  are  putting  on  their  computers,  and  that's  information 
assurance  problem.  And  according  to  Cherepko  that  problem  never  was 
addressed  or  remedied  until  the  moment  they  unplugged  from  the 
system. 

MJ:  So  movies  and  music;  do  you  agree  with  the  government  that 

they're  not  executable  files? 

CDC [MR.  COOMBS]:  I  don’t  profess  to  be  a  computer  expert. 

But - 

MJ:  Well,  that  the  evidence  showed? 

CDC [MR.  COOMBS]:  Yeah,  I  believe  that  —  you  know,  the  idea 

of  executable  —  I  guess  it  depends  how  you  view  executable.  EXE 
would  be  the  typical  executable  file.  A  movie  file  might  have  an 
ending  like  . WMD  or  . FLD  based  upon  the  type  of  player  that  would 
play  it.  But  if  the  idea  — and  the  evidence  has  been  that  executable 
file  is  something  that  you  double  click  and  run.  If  that  is  the 
definition  the  Court  goes  with  on  executable  file,  based  upon  the 
evidence,  then  music  and  movies  and  games  are  executable  files.  And 
Captain  Cherepko  did  say  that  games  certainly  were  executable  files. 
But  anything  that  you  double  click  and  it  runs,  like  a  music,  movie, 
like  a  game,  is  executable. 

MJ:  One  last  question.  I  don't  remember  —  I  asked  the 

government  this,  and  I'm  not  remembering  if  I  asked  you  that  —  Wget; 
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at  what  stage  of  the  process  did  the  evidence  come  out  that  —  is 
that  a  program  used  to  access  Department  of  State  files  or  do  you 
already  have  access  to  the  Department  of  State  files  and  Wget  then 
goes  to  retrieve  them? 

CDC [MR.  COOMBS]:  Yeah,  I  don't  think  the  —  I  don't  think  the 

government  offered  any  evidence  on  that.  As  to  —  at  what  stage  does 
Wget  get  involved?  Do  you  have  to  be  on  the  Net-Centric  Diplomacy 
Database  then  say,  hey,  Wget  run  and  get  all  this  stuff?  Or  can  you 
be  just  on  your  —  your  computer,  then  having  not  gone  to  the  Net- 
Centric  Diplomacy  Database,  and  somehow  point  Wget  to  the  Net-Centric 
Diplomacy  Database?  There's  been  no  evidence  on  that.  But  the 
issue,  I  guess,  would  be  —  to  resolve  the  question  though  would  be 
Special  Agent  Shaver's  testimony  that  Wget  would  not  give  you  any 
greater  access  to  anything  that  you  didn't  already  have  access  to. 

So  whether  you  could  somehow  point  Wget  to  the  database  and 
say,  go  grab  all  this  when  you  haven't  gone  to  the  database,  or  going 
to  the  database  and  then  saying  Wget  get  everything  you  see, 
according  to  Agent  Shaver's  testimony,  that  —  that  would  make  a 
difference  because  Wget  does  not  give  you  greater  access  to  anything 
that  you  don't  already  have  access  to.  So  I  think  the  answer  to  the 
Court's  question  would  be  he  already  had  access.  And  they  used  Wget 
to  download  it. 

MJ:  All  right.  Then  before  we  proceed  to  the  Article  104 
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defense  motion  for  a  917,  would  the  parties  like  a  brief  recess? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  Just  10  minutes  would  be 

fine . 

TC [MAJ  FEIN]:  No  problem,  ma'am. 

MJ:  All  right.  Court  is  recess  then  till  1640  or  4:40. 

[The  court-martial  recessed  at  1635,  15  July  2013.] 

[The  court-martial  was  called  to  order  at  1650,  15  July  2013.] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  Court  last  recessed  are  again  present  in 
court.  Are  the  parties  ready  to  proceed  with  the  Article  104 
argument? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  All  right.  Go  ahead. 

CDC [MR.  COOMBS]:  Your  Honor,  on  1  March  2011,  the  government 

preferred  the  current  charges  against  PFC  Manning.  And  one  of  those 
charges,  of  course,  was  the  Specification  of  Charge  I;  the  Article 
104  offense.  From  that  day  forward,  PFC  Manning  has  been  under  the 
pressure  of  what  —  at  one  time  was  a  death  penalty  offense  until 
referral,  and  now  is  offense  that  carries  with  it  the  possibility  of 
life  without  parole.  The  government  has  avoided  previous  attempts  to 
have  this  charge  dismissed  under  the  promise  that  they  had  evidence 
to  show  and  prove  actual  knowledge.  Well,  the  government  doesn't 
have  any  such  evidence  and  they  didn't  offer  any  such  evidence  to  the 
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Court  in  their  case  in  chief.  Instead  the  government  has  nothing  but 
perhaps  an  argument  that  PFC  Manning  might  have  been  negligent  in 
giving  information  to  WikiLeaks,  and  that  the  enemy  might  have  been 
able  to  access  it.  But  there's  been  no  evidence  offered  by  the 
government  to  show  actual  knowledge.  And  this  Court  has  stated  in 
its  ruling  that  if  at  trial  the  government  does  not  prove  that  the 
accused  knew  that  by  giving  intelligence  by  indirect  means  he 
actually  knew  he  was  giving  intelligence  to  the  enemy,  the  Court 
would  entertain  appropriate  motions.  And  now  at  this  date  is  the 
time  in  which  this  charge  should  be  dismissed  because  the  government 
has  not  offered  anything  to  this  Court  that  would  even  approximate 
closely  to,  let  alone,  actual  knowledge.  The  government  has 
introduced  certain  evidence  that  they  want  to  say  is  circumstantial 
proof  of  actual  knowledge.  And  they  point  to  his  military  education 
and  training,  the  training  PFC  Manning  might  have  received  both  at 
AIT  and  while  at  Fort  Drum  and  then  even  during  the  deployment,  for 
that  matter.  But  none  of  that  evidence  goes  to  show  actual  knowledge 
that  by  putting  the  information  on  the  internet  —  and  that's  really 
all  he  did  if  he  did  anything  --  and  that's  give  it  to  the  WikiLeaks, 
then  it  ultimately  goes  to  the  internet  —  that  that  single  fact 
alone  would  mean  he  would  actual  knowledge  that  the  enemy  would 
access  it. 

MJ:  Does  the  nature  of  the  information  make  any  difference? 
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CDC [MR.  COOMBS] :  In  this  instance  for  the  104,  no,  because 

the  104  offense  just  goes  with  any  information.  So  whether  it's  — 
if  it's  beneficial  to  the  enemy  in  any  way  —  so  whether  it's 
classified  or  not  does  not  make  a  difference.  Also,  in  that  would  be 
the  idea  of  whether  or  not  it  should  be  classified  or  not.  But 
that's,  again,  not  an  issue  for  this  Court  to  consider.  The  only 
issue  is  did  he  have  actual  knowledge  that  by  giving  this  information 
to  WikiLeaks  al-Qaeda,  or  now  al-Qaeda  in  the  Arabian  Peninsula, 
would  get  the  information  —  actual  knowledge.  And  the  reason  why 
that  requirement  is  important  is  because  the  104  offense  is  designed 
to  punish  those  people  who  are  either  directly  or  indirectly  trying 
to  get  information  to  the  enemy. 

MJ:  Well,  whoa,  whoa,  whoa,  is  that  a  specific  intent  offense 

or  is  that  the  knowledge  intent? 

CDC [MR.  COOMBS]:  It's  not  a  specific  intent  offense,  but  when 

you  look  at  the  requirement  of  the  actual  knowledge,  that  is  — 
that's  what  the  104  offense  is  designed  to  address;  those  individuals 
who  are  getting  information  to  the  enemy.  And  here  the  —  the 
government  has  no  information  to  show  actual  knowledge  under  104. 

And  when  they  have  previously  argued  this  point  of  saying  that  there 
would  be  no  difference  between  giving  this  information  to  the  New 
York  Times  or  WikiLeaks,  for  their  purposes,  that  they  would  still  be 
pursuing  the  same  type  of  offense,  then  we  can  actually  take  the 
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whole  issue  of  WikiLeaks  out  of  the  equation.  Because  now  the  sole 
issue  that  the  government  is  really  advancing  is  if  you  give 
information  to  any  news  organization  that  is  going  to  publish  that 
information  and  put  it  on  the  internet,  now  you  have  actual  knowledge 
that  the  enemy  is  going  to  gain  access  to  that.  And  by  that  sole 
fact  alone,  and  that  sole  act  alone,  you  should  be  facing  an  Article 
104  offense,  which  can  --  could  carry  the  death  penalty.  Article  104 
demands  more  than  that.  And  the  proof  that  Article  104  demands  is 
that  you  do  have  that  actual  knowledge.  Not  that  you  inadvertently, 
accidentally,  or  negligently  put  information  out  that  the  enemy  may 
gain  access  to,  but  that  you  actually  have  actual  knowledge.  And 
what  proof  has  the  government  offered  on  that?  Absolutely  none. 

What  they  have  offered  is  actually  proof  to  show  that  he  wouldn't 
have  actual  knowledge.  And  what's  that  proof?  That’s  the  ACIC 
document  --  the  2008  ACIC  document;  the  Army's  counterintelligence 
report.  That  report,  which,  you  know,  indicates  WikiLeaks.org,  an 
online  reference  to  foreign  intelligences  services,  insurgents  or 
terrorist  groups,  question  mark.  That's  —  that's  the  question  mark 
of  that  report.  And  within  the  report  we  see  that  —  what 
intelligence  gaps  they  identify  is  whether  or  not  the  enemy  does  go 
to  WikiLeaks.  And  we  know  from  multiple  witnesses  during  the 
government 1 s  case  in  chief  that  intelligence  gaps  are  information 
that  we  do  not  know.  So  what  better  proof  that  PFC  Manning  would  not 
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know  than  the  fact  that  the  United  States  Army  doesn't  know  whether 
or  not  the  enemy  goes  to  WikiLeaks.  And  we  list  that  as  an 
intelligence  gap;  something  we  do  not  know.  And  Sheila  Glenn,  the 
expert  that  came  to  testify  about  the  ACIC  report,  after  bringing  her 
to  that  question  several  times  of  what  is  a  question  mark  and  what 
would  that  entertain  to  you  —  what  would  that  mean  to  you,  something 
you  don't  know,  and  also  asking  what  intelligence  gap  is,  she  finally 
admitted  that,  yes,  an  intelligence  gap  is  something  we  don't  know. 
And  that  report  —  if  PFC  Manning  read  the  report  —  we  have 
information  to  show  that  he  downloaded  it  and  looked  at  it  at 
different  times  as  far  as  actually  going  to  it,  but  reading  that 
report  would  highlight  that  we  don't  know. 

MJ:  Well,  isn't  there  also  key  judgment  section  that  says 

WikiLeaks.org  represents  a  potential  force  protection 
counterintelligence,  OPSEC,  and  INFOSEC  threat  to  the  Army? 

CDC[MR.  COOMBS] :  And  when  you  look  at  that  key  judgment 

section,  the  —  the  important  thing  there  is  that  within  the  key 
judgment  it  talks  about  presumed.  It  must  be  presumed  that  —  that 
they  would  represent  a  counterintelligence  or  a  force  protection,  so 
—  in  this  it  says  in  addition  it  must  also  be  presumed  that  foreign 
adversaries  will  review  and  access.  This  goes  back  to  the  negligence 
issue  like  we're  presuming  this  would  happen.  So  you  must  presume 
that  the  enemy  might  go  to  this  information  and  get  access  to  it. 
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But  by  the  very  nature  of  that  presumption  —  again,  a  presumption  is 
something  that  we  don't  know  for  sure  to  be  true  or  not;  we're 
presuming  that.  And,  again,  that  presumption  —  that  term  within  the 
key  judgment  may  go  to  recklessness,  may  go  to  negligence,  but  that 
is  not  going  towards  actual  knowledge.  What  the  government  failed  to 
show  through  any  of  their  witnesses,  that  any  witness  that  they 
brought  forward  knew  that  the  enemy  went  to  WikiLeaks.  Many  of  the 
witnesses  didn't  know  what  WikiLeaks  was.  But  this  is  the 
government's  case.  They  need  to  prove  that  somebody  knew  the  enemy 
went  to  WikiLeaks.  They  also  didn't  offer  any  evidence  regarding  PFC 
Manning  and  his  knowledge.  What  PFC  Manning  knew  or  didn't  know. 

And  that's  a  key  fact  here,  isn't  it;  what  did  PFC  Manning  know? 

MJ:  Well,  they're  offering  circumstantial  evidence  and  the 

evidence  that  they  have  in  their  brief,  right? 

CDC [MR.  COOMBS]:  Well,  that's  circumstantial  evidence,  yes. 

And  they  point  to  Specifications  1  of  Charge  II  of  knowledge  —  how 
you  prove  knowledge  through  circumstantial  evidence,  well,  actual 
knowledge  is  —  is  something  more  than  —  than  the  circumstantial 
evidence.  Actual  knowledge  is  showing  that  the  person  had  actual 
knowledge.  They  knew  that  by  doing  this,  this  is  going  to  happen. 

MJ:  Is  it  the  defense's  position  that  that  can't  be  proved  by 

circumstantial  evidence? 

CDC [MR.  COOMBS]:  The  defense's  position  is  that  if  you  are 


10375 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


C 


9 


going  to  —  to  rely  upon  circumstantial  evidence  in  this  —  and, 
again,  without  some  sort  proof  of  actual  knowledge  —  actual  showing 
that  by  being  told  that,  being  —  reading  that  or  knowing  that  to  be 
true  and  then  doing  it  again,  some  sort  of  proof  of  actual  knowledge 
would  be  required  for  104.  Anything  else  than  that,  then  what  you're 
doing  is  you're  essentially  saying  he  should  have  known.  You  know 
what,  he  got  that  training  way  back  in  AIT  that  talked  about 
counterintelligence,  and  talked  about  how  the  enemy  has  internet, 
too.  And,  oh,  he  looked  at  this  report  that  —  that  said  we  don't 
know  for  sure,  and  it's  possible,  we  might  presume  it,  you  know,  he 
talked  to  other  people  —  he  had  information  on  his  —  in  his 
computer  that  showed  that  he  was  kind  of  aware  of  the  threat  that 
internet  possesses  for  the  United  States  government  as  far  as 
information  being  on  there  and  the  enemy  might  get  access  to  it,  all 
that  stuff  is  the  --  is  the  slope  that  Olson  says  you  don't  go  down 
when  it  comes  to  accident,  inadvertently,  or  negligently.  You  cannot 
commit  the  104  offense  by  being  negligent.  You  can  commit  the  104 
offense  by  having  actual  knowledge  though.  And  the  way  we  see  this 
is  —  and  the  reason  why  this  normally  isn't  even  an  issue  is  you  see 
this  in  104  offenses  where  the  accused  has  gone  directly  to  somebody 
that  he  believes  or  she  believes  is  the  enemy  and  is  selling 
information.  And  it  turned  out  to  be  undercover  FBI  agent  or  —  or 
other  law  enforcement.  Or  we  kept  - 
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MJ:  Well,  what  —  oh,  okay.  Go  ahead.  Yes. 

CDC [MR.  COOMBS]:  -  or  we  catch  the  individual  actually 

doing  that;  giving  information  to  the  enemy  and  with  the  full 
knowledge.  So  the  —  the  World  War  II,  Korea,  and  Vietnam  type  cases 
where  you  have  individuals  who  were  captured,  and  then  they  clearly 
give  information  to  the  enemy.  Those  cases  involve  a  direct  giving 
of  information.  And  this  goes  back  to  our  earlier  104  conversation 
of  when  you're  talking  indirectly  then,  then  the  idea  is  —  then  you 
are  achieving  indirectly  what  you  could  not,  I  guess,  achieve 
directly  or  didn't  want  to  achieve  directly  for  some  reason.  And 
when  it's  indirectly,  that's  the  government's  burden  then.  The 
government  has  to  then  say,  you  know,  what,  we've  charged  indirectly, 
PFC  Manning  had  the  ability  undoubtedly  to  send  information  directly 
to  the  enemy  if  he  wanted  to.  There's  no  doubt  about  that.  And  he 
didn't.  So  we're  proving  that  he  indirectly  did  that.  Well,  does 
anyone  believe  PFC  Manning  wanted  to  do  that?  And  I  know  that's  not 
the  burden  here,  but  anyone  believe  he  wanted  to  do  that?  The 
government's  own  evidence  through  Adrian  Lamo  indicated  just  the 
opposite;  that  that  was  not  his  intent.  That  his  intent  was  to  get 
this  information  out  to  spark  reform,  to  spark  debate.  That  was  his 
intent.  So  now  you  have  an  individual  who  his  intent  is  to  get 
information  out  to  spark  reform,  to  spark  debate,  to  get  at  a 
discussion  on  what  we're  doing  and  why  we're  doing  certain  things. 
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And  the  government  is  saying,  well,  you  know,  one  of  those 
individuals  who  had  access  to  that  information  is  the  enemy.  And,  in 
fact,  we  can  show  at  a  later  date  that  the  enemy  got  access  to  that 
information  because  it's  on  the  internet.  Well,  again,  there  —  you 
have  to  have  something  more  than  that.  You  have  to  have  more  than, 
oh,  you  know  what,  you  were  negligent  by  putting  this  out  and  the 
enemy  ultimately  got  it.  Here's  your  104  conviction.  You've  got  to 
have  something  that  shows  actual  knowledge;  that  that  was  the  —  when 
you  put  that  out,  you  had  actual  knowledge  you  were  indirectly  giving 
the  information  to  the  enemy.  And  the  reason,  again,  why  this  case 
is  different  than  all  others  —  and  this  —  this  goes  across  almost 
all  the  other  charges  —  the  1030  charges  to  be  sure,  the  government 
has  taken  a  very,  very  unique  position  on  —  on  almost  all  of  its 
charges . 

Captain  Morrow  got  up  and  said  that,  you  know,  this  is  a 
first  impression  type  case  for  the  1030.  Well,  if  Captain  Overgaard 
gets  up,  she  should  say  the  same;  this  is  a  case  of  first  impression 
for  the  104  case.  No  case  has  ever  been  prosecuted  under  this  type 
of  a  theory;  that  an  individual  by  the  nature  of  giving  information 
to  a  journalistic  organization  would  then  be  subject  to  a  104 
offense. 

MJ:  Well,  is  it  the  defense's  position  that  it  makes  any 

difference  what  kind  of  an  organization  WikiLeaks  is? 
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CDC [MR .  COOMBS]:  It  does  from  the  standpoint  if  the 

government's  trying  to  verify  WikiLeaks  and  say  that  because  of  the 
nature  of  giving  it  to  WikiLeaks  alone  he  should  have  known  that  the 
enemy  was  going  to  get  it.  And  the  only  way  they  could  do  that,  I 
guess,  is  pointing  to  the  ACIC  document.  But  the  idea  of  — 
especially  in  this  country  of  giving  the  information,  whether  it's 
classified  or  not,  to  the  press  because  you  believe  this  information 
should  get  out  to  the  public,  that  would  certainly  put  you  at 
jeopardy  for  a  793  conviction,  and  perhaps  some  other  convictions 
because  you  might  have  violated  some  nondisclosure  agreements  or 
otherwise.  But  when  you're  talking  about  an  actual  aiding  the  enemy 
offense,  then  there's  got  to  be  more  than  that.  And  should  it  make  a 
difference?  Yes.  And  the  difference  should  be  —  you  should  be 
showing  actual  knowledge  that  the  enemy  is  going  to  get  it,  and  that 
you  did  that.  And  really  in  the  defense's  position,  even  though  I 
understand  that  the  Court  didn't  go  as  far  as  we  asked  for  the 
instructions,  but  the  only  way  the  defense  really  believes  Article 
104  makes  sense  in  this  regard  to  avoid  the  very  slippery  slope  of 
basically  punishing  people  for  getting  information  out  to  the  press 
to  basically  put  a  —  I  guess  a  hammer  down  on  any  whistleblower  or 
anybody  who  wants  to  put  information  out,  in  order  to  avoid  that, 
then  —  there  should  be  evidence  to  show  that  your  intent  —  there 
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should  be  an  intent  requirement  —  that  by  using  indirectly  --  if 
you're  going  to  go  indirectly,  that  you  —  your  intent  was  to  use 
that  organization  to  indirectly  get  it  to  the  enemy.  Much  like  the 
cases  - 

MJ:  Whatever  should  be  - 

CDC [MR .  COOMBS]:  Well,  the  - 

MJ:  —  are  you  saying  that  that's  how  the  Court  should  read  the 

knowledge  prong  of  the  law  or  that  the  Court  should  change  the  law? 

CDC [MR .  COOMBS]:  No,  the  —  what  the  defense's  position  is, 

is  when  we  look  at  actual  knowledge,  then  that  is  —  when  we  say 
could  it  be  proved  by  circumstantial  evidence?  The  defense's 
position  is  no;  you  got  —  you  got  to  show  actual  knowledge  that  the 
—  that  by  giving  it  to  WikiLeaks,  New  York  Times,  Washington  Post, 
whoever,  that  you  had  actual  knowledge  the  enemy  was  going  to  get  it. 
Otherwise,  you  are  basically  just  interjecting  a  negligence  standard. 
And  Olson  clearly  says  you  can't  have  that.  So  that  evil  intent  — 
that  evil  general  intent  has  to  be  something.  And,  so,  the  defense's 
positions  is  that  the  evil  general  intent  —  if  you  don't  want  to 
call  it  kind  of  a  specific  intent,  that  evil  general  intent  has  to  be 
I  wanted  to  use  this  New  York  times,  Washington  Post,  WikiLeaks, 
whoever,  to  indirectly  get  it  to  the  enemy  because  I  couldn't  on  my 
own.  Much  like,  when  you're  dealing  with  the  individuals  who  have 
sold  information  for  profit  to  people  —  to  people  who  they  either 
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1  thought  were  the  enemy  or  were,  in  fact,  the  enemy,  or  individuals 

2  who  because  they  were  captured  by  the  enemy  during  war  time,  then 

3  started  to  collaborate  with  the  enemy,  there  is  a  clear  indication  of 

4  what  you're  doing.  And  that's  why  we  can  punish  you  under  104  with 

5  an  offense  that  can  take  away  your  life.  In  this  instance  what  the 

6  government  is  advancing  here  today  —  that  the  least  is  extremely  bad 

7  precedent  —  if  what  happens  is  you  can  give  information  to  who  you 

8  think  is  a  journalistic  organization  that  would  publish  it,  and  by 

9  the  fact  that  you  should  have  known  that  the  enemy  might  eventually 

10  get  it,  you  can  be  punished  with  104.  And  we're  going  —  we're  going 

11  to  use  circumstantial  type  evidence  to  then  say,  well,  you  know,  you 

12  do  have  some  training,  you  —  you  read  something  that  said  they  — 

13  they  potentially  might  pose  a  threat,  and  we  don't  know  for  sure  if 

14  the  enemy  goes  there,  and,  you  know,  you  were  the  go-to  analyst.  So 

15  based  upon  all  that,  guess  what?  You  get  a  104  conviction. 

16  MJ:  What  is  the  defense's  position  on  the  government's  provided 

17  evidence  that  PFC  Manning  was  a  trained  intelligence  analyst  familiar 

18  with  pattern  analysis  and  using  the  CIDNE  Iraq  database  to  develop 

19  that  analysis,  and  knowing  the  enemy  would  do  the  same  thing  and 

20  sending  that  very  database  to  be  published,  what's  the  defense's  view 

21  of  that  circumstantial  evidence  of  knowledge? 

22  CDC[MR.  COOMBS] :  Yeah,  I  mean  --  I  think  that's  a  nice  yarn 

23  drawn  by  the  government  that  doesn't  bear  out  with  any  of  the 
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1  evidence.  I  mean,  the  evidence  that  we  have  is  that  we  have  these 

2  SIGACTS,  and  the  witnesses  who  have  testified,  just  using  the 

3  government's  witnesses,  it's  an  historical  document.  And  whether  or 

4  not  the  enemy  --  there' s  been  no  evidence  that  the  enemy  has  the  same 

5  intel  capabilities  as  —  as  the  United  States  government  with  trained 

6  analysts  who  go  through  SIGACTS  and  create  work  products  that  would 

7  then  indicate,  you  know,  some  sort  of  trend  or  whatnot.  But,  you 

8  know,  what  you  do  have  is  you've  got  a  —  you've  got  a  SIGACT  that's 

9  capturing  engagement  activity  with  the  enemy.  So  just  from  a  common 

10  sense  of  the  evidence  that's  been  put  out  there,  the  enemy's  fully 

11  aware  of  this.  The  enemy's  engaged  us  —  they're  fully  aware  of  when 

12  and  how  and  to  what  success  or  nonsuccess  of  the  engagement.  And, 

13  again,  that  kind  of  goes  back  to  the  negligence  aspect  of  whether  or 

14  not  this  is  information  that  ultimately  could  be  used  by  the  enemy. 

15  And  if  we  all  agree,  let's  say,  that  yes,  it  could  be,  and  it  was  bad 

16  information,  then  that's,  again,  negligence;  you  shouldn't  have  put 

17  that  out  because  you  knew  that  there  was  a  possibility  that  the  enemy 

18  would  get  it.  If  the  government  doesn't  have  something  —  the  evil 

19  intent,  actual  knowledge  prong  that  actually  means  something,  and  all 

20  they  have  is,  you  know,  you  put  this  out,  you  —  you  knew  the  enemy 

21  might  get  it,  and  the  enemy  ultimately  got  it,  if  that's  all  they 

22  need  to  prove,  then,  again,  when  you  look  at  104,  it's  not  dependent 

23  upon  classified  information  or  not;  it's  just  information.  And,  you 
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know,  any  Soldier  who  gets  up  —  and  the  prime  example  that  the  Court 
might  be  aware  of  the  Soldier  talking  to  then  Secretary  Rumsfeld,  you 
know,  saying  to  Rumsfeld,  hey,  look,  we  are  deploying  without  proper 
armor,  deploying  without,  you  know,  the  right  equipment.  And,  you 
know,  we  don't  think  we  are  prepared.  And  Rumsfeld  said,  hey,  you 
fight  with  the  Army  that  you  got,  not  the  one  that  you  wish  that  you 
had.  That  one  fact  alone  —  you  know,  there  were  many  reporters 
around  who  published  that,  who  talked  about  that,  and  that  became  a 
story  for  a  while,  that  fact  certainly  was  information  that  the  enemy 
could  take  advantage  of. 

MJ:  But  under  that  —  your  scenario  the  person  would  have  to  be 

speaking  without  authority.  If  he's  at  a  town  hall  meeting  and 
asking  a  question,  what  —  how  is  that  without  authority? 

CDC [MR .  COOMBS]:  Well,  I  don't  think  it  would  be  a  "without 

authority"  issue  because  if  he  gets  up  and  he  starts  talking,  he 
might  have  authority  to  ask  a  —  I  mean,  to  answer  a  question,  but 
certainly  doesn't  have  authority  to  talk  about  deficiencies  of  his 
unit.  And  —  and  if  —  if  you  take  that  Soldier  out  and  put  PFC 
Manning  in  there,  and  if  PFC  Manning  now  says  something,  you  know, 
hey,  you  know,  and  he  blurts  out  a  piece  of  classified  information 
that  he  thinks  the  American  public  should  know,  with  or  without 
authority  would  not  be  an  issue  in  that  situation.  It'd  still  be 
information  that  you  put  out.  And  you'd  almost  have  kind  of  a  ipso 
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facto  probably  analysis  of  it  of  this  is  information  that  we  didn't 
want  you  to  put  out,  and  so  we  are  going  to  say  you  didn't  have 
authority  to  put  that  out.  And  then  here's  your  104  offense.  So, 
you've  got  a  —  if  Soldiers  are  left  to  wonder  is  somebody  later 
going  to  say  I  had  authority  to  say  this  or  not?  And  certainly 
classified  information  gives  a  Soldier  notice  on  what  you  can  put 
out.  And,  if  a  Soldier  then  says,  you  know  what,  I  know  the 
classified  information,  I  know  I'm  not  --  I  know  my  nondisclosure 
agreement.  I  shouldn't  put  this  out.  I  feel  it's  important  that  it 
gets  out.  I'm  willing  to  accept  responsibility  for  it  or  I'm  willing 
to  accept  the  possible  consequences,  I  want  this  information  out. 

And  that  Soldier  puts  the  information  out.  I  think  what  the  Soldier 
might  think  he  or  she  could  expect  is  perhaps,  you  know,  various 
Article  92  violations,  793  —  a  creative  prosecutor  might  throw  in 
there  641s,  1030s;  depending  how  you  got  it,  but  a  104  offense, 
without  more,  that  is  where  you  have  a  problem.  And  —  and  what  the 
government's  burden  should  be  is  then  to  show  actual  knowledge  in 
that  generally  evil  intent,  even  though  it  is  not  a  specific  intent 
requirement,  would  be  what  the  defense  argues  is  the  closest  thing  to 
—  to  arguing  that  the  —  there  has  to  be  something  more  than  just  he 
should  have  known  by  putting  this  out.  He  should  have  known  because 
of  the  type  of  information,  or  because  of  training,  he  should  have 
known  the  enemy  would  get  it.  There  has  to  be  something  more  than 
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1  just  that.  Subject  to  your  questions. 

2  MJ:  All  right.  Thank  you. 

3  ATC [CPT  OVERGAARD] :  Ma'am,  on  the  issue  of  the  definition 

4  of  knowledge,  the  government  would  just  like  to  point  the  Court  and 

5  the  defense  to  the  definition  in  the  UCMJ  of  actual  knowledge  under 

6  giving  intelligence  to  the  enemy,  which  is  the  charge  in  this  case, 

7  which  states  that  actual  knowledge  is  required,  but  may  be  proved  by 

8  circumstantial  evidence.  The  government  would  also  request  that 

9  perhaps  the  Court  could  amend  the  draft  instructions  to  include  that 

10  instruction  in  the  104  draft  instructions.  As  it  - 

11  MJ:  Wait  a  minute.  What  are  you  looking  at? 

12  ATC [CPT  OVERGAARD]:  In  the  UCMJ,  ma'am? 

13  MJ:  Yes. 

14  ATC [CPT  OVERGAARD]:  Article  104,  c (5) (c) . 

15  M J :  That's  an  evidentiary  instruction  the  Court  normally  gives 

16  in  such  cases. 

17  ATC [CPT  OVERGAARD]:  Yes,  ma'am.  And  it  was  included  in  the 

18  knowledge  definition  in  the  Spec  1  of  Charge  II,  but  it  wasn't 

19  included  in  the  Article  104.  But  the  Court  actually  did  refer  to 

20  that  in  —  in  respect  to  Article  104  in  a  different  appellate  exhibit 

21  —  in  a  different  ruling  that  you  had,  ma'am.  And  I'm  recounting  the 

22  law  in  Appellate  Exhibit  81,  but  it  was  not  included  in  the  draft 

23  instructions,  so. 
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MJ:  All  right,  the  draft  instructions  here  talk  about  elements 

and  definitions. 

ATC [CPT  OVERGAARD] :  Yes,  ma'am. 

MJ:  Knowledge  proved  by  circumstantial  evidence  is  an 

evidentiary  instruction  that  is  given  in  virtually  every  case  where 
knowledge  is  at  issue.  So  — 

ATC [CPT  OVERGAARD]:  Yes,  ma'am. 

MJ:  Should  this  have  been  a  members  case,  I  would  have  included 

it. 

ATC [CPT  OVERGAARD]:  The  government  also  notes  that  this  is 

not  an  issue  of  first  impression.  And  we've  —  we  provided  the 
relevant  case  law  on  several  other  occasions.  The  government's  not 
prepared  to  brief  that  again  today,  but  - 

M J:  What  do  you  mean  this  is  not  an  issue  of  first  impression? 

ATC [CPT  OVERGAARD]:  This  is  precedent  for  charging  this 

type  of  case,  ma'am.  And  we've  provided  case  law  precedent  of  that. 

MJ:  Is  that  the  case  where  —  I  forgot  the  name  of  the  case, 

but  where  someone  was  attempting  to  get  information  to  the  enemy  by 
publishing  troop  whereabouts,  I  think  in  the  Civil  War? 

ATC [CPT  OVERGAARD]:  In  the  newspaper.  Yes,  ma'am. 

MJ:  In  that  case,  was  the  accused  actually  trying  to  reach  the 

enemy? 
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1  ATC [CPT  OVERGAARD] :  I  don't  believe  —  I'd  have  to  review 

2  the  case  law,  ma'am.  I  wasn't  prepared  to  brief  that  today,  as  we 

3  have  actually  briefed  that  in  the  past. 

4  MJ:  Well,  Captain  Overgaard,  I  mean,  does  the  government  - 

5  ATC [CPT  OVERGAARD]:  The  government  is  not  contending  that 

6  the  accused  should  have  known.  The  government  is  contending  that  the 

7  accused  did  know.  And  the  government  —  it  would  be  nice  if  we  had  a 

8  videotaped  confession  saying  that  I  knew  by  leaking  information  to 

9  WikiLeaks  that  —  that  it  would  go  to  the  enemy.  But  we  don't  have 

10  that  in  this  case.  And  the  government  offered  a  mountain  of 

11  circumstantial  evidence,  which  is  recounted  in  10  pages  of  factual 

12  information  in  this  brief  of  the  evidence  that  —  that  we  did  elicit 

13  that  shows  that  the  accused  did,  in  fact,  know  that  by  publishing 

14  information  —  by  leaking  information  to  WikiLeaks,  and  having  it 

15  published  on  the  internet,  that  it  was,  in  fact,  going  to  al  Qaeda. 

16  MJ:  Did  —  I've  asked  this  question  of  the  government  before 

17  and  I'll  ask  it  one  more  time.  Does  it  make  any  difference  if  it's 

18  WikiLeaks  or  any  other  news  organization  or  any  other  —  well,  I 

19  shouldn't  say  any  other  —  any  news  organization  that  —  The  New  York 

20  Times,  The  Washington  Post,  The  Wall  Street  Journal? 

21  ATC [CPT  OVERGAARD]:  One  moment. 

22  [Pause] 

23 
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ATC [CPT  OVERGAARD] :  Ma'am,  as  I  said  last  time  when  you 

asked  this  question,  no,  it  would  not  —  it  would  not  potentially 
make  a  difference.  It  would  depend  on  the  facts  of  the  case  though, 
ma'am.  I  mean,  in  this  case  we  have  a  trained  intel  analyst,  and  we 
showed  evidence  specifically  that  this  accused  was  trained  on  the  — 
by  the  military  on  the  enemy,  particularly  al  Qaeda  and  Osama  bin 
Laden  and  its  use  of  the  internet.  The  United  States  showed  the 
accused  was  trained  by  the  military  and  the  types  of  information  the 
enemy  would  be  seeking  on  the  internet,  and  even  gave  a  PowerPoint 
brief  to  his  own  unit  on  that  information.  The  government  showed 
that  the  accused  was  informed  of  how  WikiLeaks.org  conducted  business 
by  his  own  searches  during  the  commission  of  this  conduct.  And  he 
actually  acknowledged  in  discussions  in  those  chats  that  the 
government  cited  in  its  brief  with  Julian  Assange  and  Adrian  Lamo 
that  he  knew  exactly  what  he  was  doing  in  disclosing  those  —  those  - 
-  that  charged  information,  ma'am. 

MJ:  The  issue  really  isn't  did  the  accused  know  what  he  was 

doing  when  he  disclosed  the  information  that  it  would  be  published. 
The  information  is  did  he  know  that  by  that  publication  that  al-Qaeda 
and  al-Qaeda  in  the  Arabian  Peninsula  would  access  it.  What's  the 
government's  specific  information  on  that? 

ATC [CPT  OVERGAARD]:  The  government  would  cite  back  to  its 

brief,  ma'am,  that  he  was  trained  specifically  that  al-Qaeda  used  the 
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internet;  that  the  enemy  used  the  internet  to  get  this  information; 
that  the  enemy  was  looking  for  this  specific  type  of  information,  and 
even  the  government  would  cite  back  to  the  accused' s  own  brief  that 
he  gave  on  that  information,  which  was  we  need  to  protect  for  OPSEC 
purposes  information  that  was  mission  critical,  dates,  times, 
locations,  personnel  information,  military  access,  public  access, 
capabilities  and  vulnerabilities,  events,  methods,  equipment  and 
additional  information,  ma'am,  that  he  specifically  briefed  because 
we  need  to  protect  that  from.  And  he  said  hackers,  terrorists,  and 
he  gave  specific  examples  of  why  the  information  needs  to  be 
protected.  And  that  was  back  in  AIT.  And  after  AIT  he  received 
additional  training. 

MJ:  So  my  understanding  of  the  government's  position  —  and 

you're  basically  focusing  on  PFC  Manning's  individual  circumstances 
and  training  and  experience,  and  that  might  distinguish  him  from 
someone  else  in  an  Article  104  setting  who  basically  had  no  knowledge 
of  intelligence. 

ATC [CPT  OVERGAARD] :  That  —  that  is  absolutely  true,  ma'am. 

PFC  Manning  is  distinct  from  an  infantryman  or  a  truck  driver  because 
he  had  all  this  training.  And  this  was  his  job.  He  knew  exactly 
what  he  was  doing.  He  knew  exactly  the  consequences  of  his  actions. 
He  was  trained  on  that  repeatedly.  And  that's  what  he  did  as  his 
daily  job.  And  he  briefed  on  the  enemy.  He  was  relied  upon  to  brief 
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on  the  enemy.  He  briefed  on  the  information  that  was  in  this  leaked 
information.  He  was  relied  upon  to  do  that. 

MJ:  What  is  the  government's  position  with  respect  to  the 

defense's  arguments  on  the  —  what  do  you  call  this,  again,  the 
report  on  — the  ACIC  report  with  a  question  mark  and  the  intelligence 
gaps? 

ATC [CPT  OVERGAARD] :  The  government  would  —  would  say 

that's  —  that's  a  great  argument  for  the  defense  to  make  in  their 
closing,  but  for  one,  the  917  standard  is  that  some  evidence,  and 
it's  construed  in  the  light  most  favorable  the  prosecution,  but  the 
other  evidence  that  the  prosecution  would  point  you  to,  ma'am,  is 
that  the  ACIC  document  itself  —  that  it  must  be  presumed  that 
foreign  adversaries  —  adversaries  will  review  and  access  any  DoD 
sensitive  or  classified  information  posted  to  WikiLeaks  that  are  — 
and  that  access  was  made  even  more  obvious  to  the  accused  than 
pursuit  of  WikiLeaks.org  was  made  more  obvious  to  the  accused  by 
leaking  exactly  what  he  did  leak,  and  putting  that  information  that 
he  knew  the  accused  —  that  the  enemy  was  seeking  on  WikiLeaks. 

[Pause] 

MJ:  Where  in  the  evidence  can  the  Court  find  the  dates  of 

release  or  the  —  the  CID  —  CIDNE  Iraq  and  Afghanistan  appropriate 
dates  of  where  and  what  was  found  when. 
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ATC [CPT  OVERGAARD] :  Of  where  the  —  when  the  particular 

evidence  was  released,  ma'am,  by  the  accused  or  by  WikiLeaks? 

MJ:  What  evidence  has  the  government  presented  and  where  can  I 

—  where  can  the  Court  find  it? 

ATC [CPT  OVERGAARD]:  The  Court's  taking  judicial  notice  of  - 

—  of  some  of  the  release  dates. 

MJ:  No,  no,  not  the  WikiLeaks  release  dates. 

ATC [CPT  OVERGAARD] :  Okay. 

MJ:  The  --  where  the  CIDNE  Iraq  and  Afghanistan  databases  — 

the  forensics? 

ATC[CPT  OVERGAARD]:  One  moment,  please.  Your  Honor. 

[Pause] 

ATC [CPT  MORROW]:  Ma'am,  what's  the  —  what's  the  question 

again? 

MJ:  The  question  is  if  —  should  the  Court  decide  to  look  at 

the  forensics  in  this  case,  where  is  the  —  where  can  the  Court  find 

—  where  does  the  government  believe  in  its  presentation  of  the  case 
that  the  Court  can  find  evidence  of  the  CIDNE  Iraq  and  Afghanistan,  I 
guess,  progression  from  where  it  began  and  how  it  got  to  WikiLeaks? 

ATC [CPT  MORROW]:  The  stipulation  of  expected  testimony  of 

Patrick  Hoeffel. 

ATC [MAJ  FEIN]:  Prosecution  Exhibit  116,  Your  Honor,  has  the 

dates  at  least  when  the  information  was  pulled. 


10391 


o 


0 


1  ATC [CPT  OVERGAARD] :  And  what  Mr.  Hoeffel  did  in  there, 

2  ma'am,  was  he  actually  narrowed  down  based  on  some  of  the  changes  in 

3  the  —  the  SIGACTS  and  the  database  to  a  particular  time  that  it  must 

4  have  been  stolen.  And  that's  documented  in  —  in  that  stipulation  of 

5  expected  testimony. 

6  MJ:  Okay.  Thank  you.  What's  the  government's  position  with 

7  "should  have  known"?  Is  that  a  high  enough  standard  to  meet  the 

8  burden  of  actual  knowledge? 

9  ATC [CPT  OVERGAARD]:  The  government  is  arguing  that  he  did 

10  know,  ma'am.  The  government's  not  - 

11  MJ:  I  understand  that.  My  question  is  —  is  "should  have 

12  known"  a  considera  —  is  that  enough  to  equal  actual  knowledge? 

13  ATC [CPT  OVERGAARD]:  One  moment,  please. 

14  [Pause] 

15  ATC [CPT  OVERGAARD]:  Ma'am,  the  government  does  not  contend 

16  "should  have  known"  is  included  in  actual  knowledge.  Subject  to  your 

17  questions? 

18  MJ:  I've  asked  them.  Thank  you. 

19  ATC [CPT  OVERGAARD]:  Thank  you,  ma'am. 

20  MJ:  Any  final  words  from  the  defense? 

21  CDC [MR.  COOMBS]:  Yes,  Your  Honor.  Well,  the  government  said 

22  it  would  be  nice  if  we  had  a  taped  confession.  We  don't  have  a  taped 

23  confession.  But  they  do.  They've  got  the  chats  between  my  client 
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and  Adrian  Lamo.  They've  got  the  chats  between  my  client  and  the 
person  they  believe  is  Julian  Assange.  They've  got  multiple  emails 
between  my  client  and  other  individuals  when  he  talked  about  the 
charged  releases.  And  what  - 

MJ:  Was  —  has  those  been  introduced  into  evidence? 

CDC [MR .  COOMBS]:  They  have.  It  —  it  was  between  my  client 

and  Eric  Schmidt.  And  —  and  when  you  look  at  that,  that's  their  — 
their  taped  confession.  And  what  do  you  see  in  that?  What  you  see 
is  him  talking  about  why  he  did  this;  to  get  individuals  to  talk 
about  this  —  to  spark  reform.  Nowhere  in  there  is  the  conversation 
is,  I  know  al-Qaeda.  Al-Qaeda  in  the  Arabian  Peninsula  is  going  to 
get  this  information.  In  fact,  nowhere  in  any  of  the  conversations 
that  the  government  has  —  has  admitted  does  he  talk  about  al-Qaeda, 
al-Qaeda  of  the  Arabian  Peninsula,  Osama  bin  Laden,  Adam  Gadahn,  or 
any  other  potential  enemy.  That's  not  at  all  discussed.  What  is 
discussed  is  a  single  focus  of  I  thought  this  information  had  to  get 
out.  And  I  wanted  it  to  spark  reform.  I  was  encouraged  by  the 
response  to  the  Apache  video.  That's  the  type  of  stuff  that's  coming 
out  from  the  taped  confession  that  we  have.  And  --  and  that  is  the 
circumstantial  evidence  of  his  intent.  You  look  at  the  internet. 

The  government  said,  look,  there's  a  difference  between  PFC  Manning 
and  an  infantryman  or  a  truck  driver.  Well,  infantrymen  and  now 
women  certainly  know  that  the  internet  is  a  big  place.  Everybody 


10393 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


9 


knows  that.  If  you  —  if  you  have  any  type  of  computer  knowledge, 
you  know  the  internet  is  a  very  vast  place  and  that  anyone  who  has 
internet  connection  can  go  anywhere  on  that  internet.  But  there  are 
multiple  websites  out  there,  and  sites  that,  if  you  spend  your  entire 
life  you  would  never  be  able  to  visit.  So  one  of  those  sites  in  this 
case  —  that's  relevant  in  this  case  is  WikiLeaks.  So  now  the 
question  is,  what  evidence  do  we  have  that  the  enemy  went  to 
WikiLeaks?  We  know  about  the  ACIC  document,  but  you  also  have  Shelia 
Glenn's  testimony  saying  at  the  time  that  this  was  drafted  they  had 
no  intelligence  on  whether  or  not  the  enemy  went  to  WikiLeaks.  And 
this  is,  you  know,  shortly  before  —  this  was  in  2008.  So  this  is 
shortly  before  the  charged  misconduct  in  this  case.  And  this  is  — 
and  Captain  Tooman  asked  Shelia  Glenn  about  this,  like  where  do  you 
get  your  information  for  these  type  of  documents?  And  sometimes  it's 
a  request  for  them  to  do  something  and  sometimes  they  do  it  on  their 
own.  And  this  was  we  did  it  on  our  own.  It  wasn't  a  request  by 
anybody.  But  every  time  that  they  had  some  sort  of  intelligence  — 
and  they  went  out  everywhere  to  get  all  the  intelligence  to  combine 
in  this  document,  if  they  had  an  intelligence  source  for  a  particular 
fact  or  information,  it  would  be  cited  in  the  ACIC  document.  And 
when  you  look  at  the  presumption  or  anything  else,  there  is  no 
source.  And  that's  because,  as  Shelia  Glenn  testified,  the  United 
States  Army,  as  of  the  2008,  the  time  this  was  drafted,  did  not  know 
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1  whether  or  not  the  enemy  went  to  WikiLeaks.  And,  if  you  are  going  to 

2  ascribe  some  sort  of  special  knowledge  to  a  junior  analyst  right 

3  outside  of  AIT,  I  think  you  would  ascribe  a  little  bit  more  knowledge 

4  to  who  should  be  the  trained  professionals,  who  had  been  doing  this  - 

5  -  I  can't  remember  now  how  long  Sheila  Glenn  said  she'd  been  doing 

6  this  —  but  her  office  —  this  is  what  they  do.  And  they  certainly 

7  have  people  slightly  more  knowledgeable  than  my  client  on  intel 

8  analyst  and  analysis  of  information.  And  they  don't  know.  And  yet 

9  somehow  the  government  wants  you  to  ascribe  knowledge  to  my  client. 

10  You  know,  where  is  the  line  —  if  you  are  going  to  ascribe 

11  some  sort  of  special  knowledge,  where  is  the  line  then?  And  the 

12  Court  did  ask,  you  know,  would  —  you  know,  "should  have  known"  be 

13  enough  for  you?  The  Court  had  to  —  I  mean,  the  government  had  to 

14  think  about  that  for  a  moment.  And  then  they  came  back  and  said,  no, 

15  okay.  Yeah,  we'll  agree  "should  have  known"  is  not  enough.  So,  you 

16  know,  how  far  more  off  that  line  do  you  have  to  go  before  you  say, 

17  yes,  there's  a  104  offense?  The  defense's  position  is  that  Olson  is 

18  the  —  the  case  that  would  be  instructive  on  this,  and  that's  the 

19  general  evil  intent.  That's  the  line,  and  then  going  into  actual 

20  knowledge.  And  the  government  has  offered  no  evidence  of  that. 

21  Every  bit  of  evidence  they've  offered  goes  towards  the  "should  have 

22  known".  And  the  hindsight  is  20/20  type  standard.  So  they're 

23  basically  trying  to  punish  him  for  being  an  intel  analyst,  going  to 
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AIT,  and  information  he  should  have  known.  And  that's  not  a  104 
offense.  Your  Honor. 

MJ:  All  right,  thank  you. 

TC [MAJ  FEIN]:  Ma'am,  just  a  question  for  clarification.  When 
you  asked  earlier  the  dates  for  the  CIDNE  databases  - 

MJ:  Yes. 

TC[MAJ  FEIN]:  -  we  presume  it's  because  of  —  those  would  go 

—  that's  some  of  the  classified  information  that  the  government's 
alleging  was  compromised  and  that  would  go  to  aiding  the  enemy 
charge.  There's  two  other  categories  of  information.  Would  the 
Court  want  those  dates  as  well  — 

MJ:  Yes. 

TC [MAJ  FEIN]:  -  and  know  where  to  find  them? 

MJ:  Yes. 

TC [MAJ  FEIN]:  First,  Your  Honor,  it's  the  Apache  video.  And  if 
the  Court  references  PE  127,  which  is  the  volumed.txt  file 

M J :  Hold  on. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  I've  got  Apache  video  —  what  is  it? 

TC [MAJ  FEIN]:  Prosecution  Exhibit  127. 

MJ:  Okay. 

TC [MAJ  FEIN]:  And  that's  the  volumes.txt  mounting  data.  And 
that  date  is  15  February,  '10.  And  then  the  third.  Your  Honor,  is 
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the  Department  of  State  cable  information.  And  there  is  two 
different  prosecution  exhibits  to  reference  there.  Prosecution 
Exhibit  158,  which  is  a  classified  summary  of  the  Department  of  State 
server  logs.  And  Prosecution  Exhibit  159,  which  is  an  unclassified 
firewall  log  summary.  And  those  would  show  the  date  28  March  2010. 

MJ:  Hold  on. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ :  What  was  159  again? 

TC [MAJ  FEIN]:  Yes,  ma'am.  159  is  the  Department  of  State 
firewall  log  summary. 

MJ:  And  the  date  was? 

TC [MAJ  FEIN]:  28  March  2010. 

MJ:  Okay.  I  thought  you  said  there  were  three? 

TC [MAJ  FEIN]:  May  I  have  a  moment.  Your  Honor? 

[Pause] 

TC [MAJ  FEIN]:  Ma'am,  when  I  said  three,  that  included  CIDNE 
databases.  So  the  CIDNE  databases,  the  Apache  video,  and  the 
Department  of  State  cables. 

MJ:  So  the  CIDNE  databases,  the  Apache  —  the  CIDNE  databases 

rely  on  what  exhibits  and  what  date? 

TC [MAJ  FEIN]:  Ma'am,  there's  multiple  exhibits  for  the  CIDNE 
databases.  But  the  one  the  United  States  offered  before  was 
Prosecution  Exhibit  116  - 
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1  M J :  And  what  were  the  dates? 

2  TC [MAJ  FEIN]:  -  which  is  the  Stipulation  of  Expected 

3  Testimony  from  Mr.  Hoeffel.  The  dates  there.  Your  Honor,  is  that  the 

4  —  the  two  databases  were  pulled  at  different  times.  First  the 

5  CIDNE-A  database  was  pulled  between  11  —  I'm  sorry,  I  know  you're 

6  asking  for  the  date  —  was  17  January  2010.  And  the  CIDNE-I  database 

7  was  pulled  on  3  January  2010. 

8  M J :  You  said  3  January? 

9  TC [MAJ  FEIN]:  Yes,  ma'am,  for  CIDNE-I. 

10  [Pause] 

11  MJ:  And  for  the  CIDNE-A  and  I  databases,  what  exhibits  — 

12  what's  the  government  theory  —  what  —  I  mean,  what  exhibits  has  the 

13  government  offered  in  advance  of  that  on  when  PFC  Manning  allegedly 

14  sent  them  to  WikiLeaks? 

15  TC [MAJ  FEIN]:  Yes,  ma'am.  So,  ma'am,  the  United  States  would  - 

16  -  it's  referenced  in  the  motion,  but  Prosecution  Exhibit  —  I'm 

17  trying  to  find  the  number.  Your  Honor. 

18  ATC [CPT  MORROW]:  -Your  Honor,  the  government's  theory  is  that 

19  that  transmission  to  WikiLeaks  occurred  sometime  at  the  end  of 

20  January  2010. 

21  MJ:  And  what  - 

22  ATC [CPT  MORROW]:  That  we  rely  —  rely  on  the  —  the  fact  that 

23  the  --  a  CD  was  burned  right  after  the  wiping  of  the  computer.  Do 
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you  recall  that  testimony  from  Special  Agent  Shaver? 

MJ:  So  I'd  look  to  Special  Agent  Shaver's  testimony? 

ATC [CPT  MORROW]:  To  Special  Agent  Shaver's  testimony  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Thank  you. 

ATC [CPT  MORROW]:  -  that  with  --  and  also  with  respect  to 

when  the  —  the  yada. cart . ezll  was  created  as  a  --  one  encrypted  file 
that  included  the  Afghan  events  and  the  Iraq  events. 

TC [MAJ  FEIN]:  And,  ma'am,  that's  what  we're  looking  —  so 
Prosecution  Exhibit  92  is  the  SD  card  that  contained  that  file  and 
contained  those  events  with  the  dates  of  those  based  off  Special 
Agent  Shaver's  testimony. 

MJ:  All  right,  is  there  —  are  there  —  anything  else  that 

either  side  would  like  to  state  with  respect  to  this  motion? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

ATC [CPT  OVERGAARD] :  No,  ma'am. 

MJ:  All  right,  the  Court  is  taking  this  --these  two  motions 

under  advisement,  and  will  have  —  the  plan  is  to  have  a  ruling  by 
Thursday  morning  to  read  before  we  come  on  the  record.  We  have  one 
issue  left  to  address,  and  that  is  the  government's  proposed 
rebuttal.  Would  the  parties  like  a  brief  recess  before  we  do  that? 

TC [MAJ  FEIN]:  Yes,  ma'am.  And  —  and  the  United  States  would 
request  a  brief  802  during  the  recess. 
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MJ:  All  right.  Well,  how  long  do  you  think  that  all  this 

should  take? 

TC [MAJ  FEIN]:  15  minutes.  Your  Honor,  total. 

MJ:  All  right,  defense? 

CDC[MR.  COOMBS]:  Ma'am,  we  have  no  objection  to  that  course 

of  action. 

MJ:  All  right,  why  don't  we  be  safe  and  just  make  it  a  20 

minute  recess.  Court  is  in  recess  until  10  minutes  to  1800  or  6 
o'  clock. 

[The  court-martial  recessed  at  1737,  15  July  2013.] 

[The  court-martial  was  called  to  order  at  1802,  15  July  2013.] 

M J:  The  court  is  called  to  order.  Let  the  record  reflect  all 
parties  present  when  the  court  recessed  are  again  present  in  court. 

The  parties  and  I  held  a  brief  R.C.M.  802  conference  before 
coming  on  today.  That's,  once  again,  a  conference  where  the  parties 
raise  issues  that  may  arise  during  the  trial  or  we  discuss  scheduling 
and  logistics  and  put  what  was  discussed  on  the  record  at  the  next 
open  session.  Major  Fein,  I  believe  the  R.C.M.  802  conference 
involved  the  email  that  was  given  to  you  by  the  defense? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  asked  for  the 
R.C.M.  802  conference  in  order  to  give  notice  to  the  Court  and  the 
defense  that  the  United  States  was  going  to  request  the  opportunity 
to  recall  Chief  Ehresman  to  —  to,  I  guess,  continue  a  cross- 
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examination  based  off  this  email.  We'll  get  ahold  of  him,  either 
tonight  tomorrow,  to  determine  if  it's  —  if  his  testimony  would  have 
changed.  And,  if  so,  then  we  would  recall  him.  If  not,  then  we'd 
continue  as  is. 

MJ:  Okay.  And  the  email  has  been  marked  as  an  appellate 

exhibit? 

TC [MAJ  FEIN]:  It  has  not  been,  ma'am.  We'll  have  it  marked 
right  now. 

MJ:  Okay. 

[The  trial  counsel  had  the  document  marked  Appellate  Exhibit  605  by 
the  court  reporter . ] 

TC [MAJ  FEIN]:  Ma'am,  it  has  been  marked  Appellate  605  [handing 
the  document  to  the  Military  Judge] . 

MJ:  Okay.  Defense? 

CDC [MR.  COOMBS]:  Your  Honor,  our  position  would  be  —  of 

course,  we'll  wait  until  the  government  actually  says  they  —  they 
are  not  going  to  try  to  call  Mr.  Ehresman  back.  But  our  position 
would  be  that  that  email  is  not  inconsistent  with  anything  they  put 
out  in  his  testimony.  We'll  have  to  review  the  exact  testimony  from 
the  record.  Then,  also,  it  is  on  such  a  remote  fact  that  the 
government  should  not  be  allowed  to  reopen  its  cross-examination  of 
this  witness. 

MJ:  Okay.  Government,  I  —  if  you  want  to  recall  him  on 
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Thursday  morning  and  reopen  your  case,  I'll  let  you  do  it. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Okay.  Now  at  issue  we  have  the  prosecution  notice  of 

potential  rebuttal  case.  And,  defense,  I  understand  you're  opposing 
it  in  its  entirety? 

CDC [MR.  COOMBS]:  Yes,  ma'am. 

MJ:  Okay,  why  don't  you  set  forth  -  Yes  [speaking  to  the 

Civilian  Defense  Counsel] ? 

CDC [MR.  COOMBS]:  I  thought  you  were  going  to  direct  something 

to  the  defense. 

MJ:  No.  Okay,  government,  why  don't  you  put  on  the  record  what 

you  want  to  rebut.  Just  do  witness  by  witness  and  then  we'll  hear 
from  the  defense. 

ATC [CPT  OVERGAARD] :  Yes,  ma'am.  Government  also  notes  that  we  - 
-  as  we  discussed  in  the  —  we  discussed  the  404 (b)  note  —  ruling  in 
the  Article  802  —  or  at  the  802,  I  should  say,  and  it's  Appellate 
Exhibit  287.  The  government's  requesting  to  - 

MJ:  So  that  information  is  going  —  you're  going  to  call  — 

recall  Ms.  Showman  for  that  information  that  was  discussed  to  rebut 
the  --  what  you  have  in  here  basically  - 

ATC [CPT  OVERGAARD]:  Yes,  ma'am. 

MJ:  -  the  motive  evidence?  Go  ahead. 

ATC [CPT  OVERGAARD]:  We're  specifically  talking  about  the  "act 
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1  to"  that  was  cited  in  your  Appellate  Exhibit  287,  ma'am. 

2  MJ:  May  I  see  Appellate  Exhibit  287,  please? 

3  [The  document  has  handed  to  the  Military  Judge.] 

4  MJ:  Thank  you. 

5  ATC [CPT  OVERGAARD] :  Ma'am,  the  United  States  would  like  to 

6  recall  Ms.  Showman  to  rebut  the  motive  evidence  the  defense  elicited 

7  from  Ms.  Lauren  McNamara  in  the  February  2009  to  the  August  2009, 

8  which  would  have  been  the  pre-deployment  timeframe.  And  Ms.  McNamara 

9  in  her  testimony  said  words  to  the  effect  of  the  accused  told  her 

10  that  I  can  apply  what  I  learned  to  provide  —  I  can  apply  what  I 

11  learned  to  provide  more  information  to  my  officers  and  commanders  and 

12  hopefully  save  lives.  And  defense  proffered  that  they're  admitting 

13  that  for  plan  and  motive  for  what  the  accused  was  intending  to  do  — 

14  was  intending  to  do  with  the  information,  that  he  was  wanting  to  help 

15  his  unit.  And  Ms.  McNamara  also  said  words  to  the  effect  of  PFC 

16  Manning  told  her  that  I  was  concerned  with  saving  the  lives  of 

17  families  in  foreign  countries  and  other  noncombatants  and  just  the 

18  families  of  Soldier  and  Soldiers  themselves  in  making  sure  they  go 

19  home  safe.  So  the  government  would  like  to  offer  the  evidence  —  the 

20  statement  --  the  404(b)  evidence;  "act  to"  in  there,  of  what  Ms. 

21  Showman  said  to  her  to  rebut  the  accused's  plan  and  motive  evidence 

22  that  was  proffered  by  their  —  or  that  was  offered  by  the  defense  in 

23  their  case. 
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MJ:  So  "Act  2"  only? 

ATC [CPT  OVERGAARD] :  Yes,  ma'am. 

MJ:  Okay.  Defense? 

ADC [MAJ  HURLEY]:  Pardon  me.  Captain  Overgaard.  Ma'am,  would 

it  be  easier  for  you  if  we  went  sort  of  witness  by  witness.  You 
heard  the  proffer  from  the  government  and  you  have  our  response? 

MJ:  Yes.  Yes.  That's  what  I  thought  I  had  said. 

ADC [MAJ  HURLEY]:  Oh,  I'm  sorry,  ma'am.  I  didn't  understand 

that.  All  right.  And  I'll  just  brief  here  from  counsel  table  if 
that's  okay. 

MJ:  That's  fine.  That's  fine. 

ADC [MAJ  HURLEY]:  All  right,  with  respect  to  the  testimony  of 

Ms.  Showman;  first,  we  would  indicate  —  and  that  we're  glad  the 

government  has  indicated  with  specificity  what  facts  that  they  want 
that  were  elicited  during  our  case  in  chief  that  they  wish  to  rebut. 
We  would  point  out  the  specific  facts  that  Ms.  Me  —  Ms.  McNamara 
talked  about,  and  you  have  the  chat  to  use  as  a  guide  as  you  —  as 
you  go  through  what  specific  things  the  —  Ms.  McNamara  and  my 
client,  PFC  Manning  talked  about,  and  view  that  evidence  in  light  of 
the  evidence  that  you  understand  from  Ms.  Showman  in  the  404(b) 
evidence.  That  how  does  that  evidence  from  Ms.  Showman  —  the  404(b) 
evidence  rebut  the  803(3)  motive  intent  plan  evidence  that  we  were 
able  to  deduce  from  Ms.  McNamara. 
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1  ATC [CPT  OVERGAARD] :  The  United  States  would  just  offer  it  shows 

2  that  —  it  shows  PFC  Manning's  pre-deployment  state  of  mind  in  the 

3  same  time  period  that  was  elicited  from  Ms.  McNamara.  It  shows  — 

4  directly  rebuts  that  the  accused  allegedly  had  some  noble  motive  — 

5  the  carax  —  the  defense  mode  of  evidence. 

6  MJ:  Okay.  Well,  Major  Hurley,  this  is  kind  of  --  this  isn't 

7  that  hard.  I  mean,  it  does  rebut  it.  So  I'm  going  to  allow  that. 

8  ADC [MAJ  HURLEY] :  Yes,  ma'am. 

9  MJ:  Go  ahead. 

10  ATC [CPT  OVERGAARD]:  And  the  United  States  also  would  like  to 

11  call  Specialist  Marshal  to  rebut  the  motive  evidence  that  the  defense 

12  elicited  from  Sergeant  Sadtler  in  the  March  2009  deployment  time 

13  period. 

14  MJ:  And  what  is  that? 

15  ATC [CPT  OVERGAARD]:  And  this  —  well,  actually  this  —  the  time 

16  period  is  actually  contingent  upon  the  next  request  for  rebuttal. 

17  Maybe  we  should  skip  to  that  one  first? 

18  MJ:  Wait  a  minute. 

19  ATC [CPT  OVERGAARD]:  Sorry,  ma'am. 

20  MJ:  You  mean  a  specific  SIGACT? 

21  ATC [CPT  OVERGAARD]:  Yes,  Ma'am. 

22  MJ:  You  want  to  go  to  that  next? 

23  ATC [CPT  OVERGAARD]:  Yes,  ma'am. 
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1  MJ:  Okay. 

2  ATC [CPT  OVERGAARD] :  That  —  I  think  that'll  make  more  sense 

3  actually. 

4  MJ:  All  right.  Go  ahead. 

5  ATC [CPT  OVERGAARD]:  So  the  United  States  asks  to  recall  Special 

6  Agent  Shaver  to  discuss  a  SIGACT  dated  in  the  March  2010  time  period 

7  to  expound  upon  uncountradicted  testimony  of  Sergeant  Sadtler  that  he 

8  felt  the  incident  the  accused  approached  him  about  with  the 

9  documentation  involving  Iraqi  nationals  taking  place  around  December 

10  of  2009.  The  government  would  like  to  introduce  the  SIGACT 

11  addressing  that  particular  information,  which  is  dated  March  2010, 

12  just  to  provide  clarity  to  the  timing. 

13  MJ:  So  if  I  understand  what  you're  trying  to  do;  Sergeant 

14  Sadtler  testified  that  he  had  come  to  —  he  had  deployed  on  or  about 

15  December  —  didn't  remember  if  it  was  before  or  after  Christmas,  and 

16  spoke  with  PFC  Manning  sometime  —  maybe  a  month  afterwards  regarding 

17  a  particular  SIGACT.  And  you're  intending  to  bring  this  witness  to 

18  show  the  same  SIGACT  was  dated  March  2010? 

19  ATC [CPT  OVERGAARD]:  To  show  when  —  when  that  actually  took 

20  place  —  just  to  provide  clarity  on  the  timing  of  —  of  the 

21  particular  evidence.  It  wasn't  December  2009  time  period,  it  was  the 

22  May  2010  time  period.  The  government  believes  that  the  timing  of 

23  this  potential  evidence  as  it  seems  to  be  proffered  by  the  —  or 
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argued  based  on  their  opening,  is  that  defense  is  trying  to  offer 
some  evidence  to  show  motive  or  state  of  mind.  And  the  government  is 
simply  offering  that  —  that  this  evidence  is  relevant  because  it 
shows  that  it  didn't  take  place  in  the  December  2009  time  period.  It 

took  place  after  a  lot  of  the  misconduct,  which  is  in  March  of  2010. 

MJ:  Okay.  Defense? 

ADC [MAJ  HURLEY]:  Ma'am,  one  second,  please. 

[Pause] 

ADC [MAJ  HURLEY]:  The  first  —  our  first  comment,  ma'am,  would  be 
that  they  had  the  opp  —  they  had  this  information,  it  was  —  the 
government  was  well  aware  of  the  timing  of  this  information  and  what, 
if  any,  effect  it  might  have  had  on  PFC  Manning's  state  of  mind  well 
prior  to  Sergeant  Sadtler  taking  the  stand.  So  they  could  have  used 
the  SIGACT,  they  could  have  admitted  the  SIGACT  in  the  first  place 
with  Special  Agent  Shaver,  and  then  use  the  SIGACT  with  Sergeant 
Sadtler  to  better  lock  it  in  time.  Because  now  the  problem  is  this; 

Special  Agent  Shaver,  not  a  member  of  10  Mountain,  is  going  to  take 

the  stand,  and  say,  yep,  I  found  this  SIGACT,  it  was  among  the 
SIGACTS  dated  March.  And  they're  going  to  ask  you  as  trier  of  fact 
then  to  say  from  your  memory,  well.  Sergeant  Sadtler  told  me  it  was 
about  this,  so  this  appears  to  be  the  same  thing  —  when  there  was  an 
opportunity  to  make  it  clear  to  the  trier  of  fact  exactly  how  --  what 
this  evidence  was  so  that  the  witness,  himself,  could  say  yes  or  no 
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1  to  it.  So  our  objection  would  be  is  beyond  the  scope  of  the 

2  appropriate  rebuttal,  and  its  relevance  —  this  is  very  ancillary 

3  fact,  whether  something  occurred  in  December  of  2009,  according  to 

4  the  testimony  of  Sergeant  Sadtler  —  assuming  that's  the  correct 

5  recitation  —  or  whether  it  occurred  in  March  of  2009,  you're  talking 

6  about  —  if  you  at  least  view  it  from  the  government's  perspective, 

7  just  a  part  of  the  time  period  in  which  the  accused  was  allegedly 

8  committing  these  crimes  --  PFC  Manning  was  allegedly  committing  these 

9  crimes. 

10  MJ:  All  right,  once  again,  I  disagree.  I  think  it's  proper 

11  rebuttal  to  Sergeant  Sadtler 's  testimony.  And  the  motive  evidence 

12  and  the  relevance  and  the  time  —  when  it  occurred  is  relevant.  So  I 

13  will  allow  that.  If  either  side  wants  to  recall  Sergeant  Sadtler, 

14  feel  free  to  do  that  as  well. 

15  ATC [CPT  OVERGAARD] :  So  going  back  to  the  previous  one,  the 

16  United  States  would  like  to  call  Specialist  Marshal  to  rebut  the 

17  motive  evidence  that  the  defense  elicited  from  Sergeant  Sadtler  in 

18  the  March  2010,  which  is  the  deployment  timeframe. 

19  MJ:  And  what's  he  going  to  tell  me? 

20  ATC [CPT  OVERGAARD]:  Specialist  Marshal  will  - 

21  MJ:  Or  she. 

22  ATC [CPT  OVERGAARD]:  -  say  that  —  words  to  the  effect  of  I 

23  would  be  shocked  if  you  were  not  telling  our  kids  about  me  10  to  15 
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1  years  from  now.  And  that  was  in  May  of  2010. 

2  MJ:  Wait  a  minute.  Say  that  again. 

3  ATC[CPT  OVERGAARD] :  I  would  be  shocked  if  you  were  not  telling 

4  your  kids  about  me  in  10  to  15  years  from  now. 

5  TC [MAJ  FEIN]:  Ma'am,  to  clarify,  PFC  Manning  said  that  to 

6  Marshal. 

7  MJ:  Okay. 

8  ATC [CPT  OVERGAARD]:  And  the  government  offers  that  - 

9  MJ:  And  --  yeah,  what's  the  —  what's  the  - 

10  ATC [CPT  OVERGAARD]:  -  the  government  argues  that,  again,  the 

11  defense  has  offered  that  there  has  been  some  sort  of  noble  motive 

12  based  on  what  the  accused  saw  occurring  in  Iraq.  However,  this  would 

13  show  completely  the  opposite.  It  would  show  that  instead  of  having  a 

14  noble  motive,  he  was  seeking  notoriety.  And  it  goes,  again,  to 

15  motive  and  his  state  of  mind. 

16  MJ:  Defense? 

17  ADC [MAJ  HURLEY]:  Yes,  ma'am.  I  guess  with  respect  to  this 

18  testimony  by  Specialist  Marshal,  his  testimony  that  the  government 

19  indicated  has  —  the  conversation  occurred  allegedly  in  May  of  2010. 

20  The  conversation  that  the  - 

21  MJ:  March  or  May? 

22  ADC [MAJ  HURLEY]:  May  is  what  I  understood  from  the 

23  government. 
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ATC [CPT  OVERGAARD] :  The  statement  to  Specialist  Marshal  was  in 
May  2010. 

MJ:  Oh. 

ATC [CPT  OVERGAARD]:  The  government's  trying  to  parallel  to  March 
2010  occurrence  in  the  SIGACT. 

MJ:  Okay,  yes.  I'm  sorry. 

ADC [MAJ  HURLEY]:  So  May  2010  is  when  this  conversation 

occurred  allegedly  with  Specialist  Marshal.  And  the  —  the 
information  the  government  wants  to  rebut  —  the  conversation  between 
PFC  Manning  and  Sergeant  Padgett  occurred  in  February  or  March  of 
2010. 

MJ:  Padgett  or  Sadtler? 

ADC [MAJ  HURLEY]:  Sadtler.  I  think  my  record  with  names  in 

this  Court  is  fairly  established.  With  Sergeant  Sadtler.  Ma'am,  I 
apologize. 

MJ:  That's  fine. 

ADC [MAJ  HURLEY]:  So  we  would  see  that  temporal  distinction  as 

being  beyond  the  scope  of  appropriate  rebuttal. 

MJ:  Well,  let  me  ask  the  parties  positions  on  here.  Is  it  the 

parties  recollection  that  Sergeant  Sadtler' s  statement  that  he  made  - 
-  this  conversation  occurred  in  March? 

ATC [CPT  OVERGAARD]:  No,  ma'am,  which  is  why  the  government 
wanted  to  introduce  the  —  talk  about  the  next  one  first  because  the 
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1  government  would  first  like  to  elicit  that  information. 

2  MJ:  I  don't  understand  what  you  are  trying  to  do.  So  Marshal  - 

3  -  Sergeant  Sadtler  - 

4  ATC [CPT  OVERGAARD] :  Sergeant  Sadtler  discussed  facts  that 

5  occurred  in  regard  to  a  specific  event  that  occurred  while  deployed 

6  that  PFC  Manning  approached  him  about  and  that  he  was  —  appeared 

7  upset  about.  Sergeant  Sadtler  couldn't  remember  when  - 

8  MJ:  I  --  I  understand  all  of  that.  I'm  looking  at  a  timing. 

9  The  government  alleges  this  to  happen  in  March? 

10  ATC [CPT  OVERGAARD]:  Yes,  Ma'am. 

11  MJ:  Based  on  Sergeant  Sadtler 's  testimony? 

12  ATC [CPT  OVERGAARD]:  No,  Ma'am.  Based  on  the  testimony  we  will 

13  elicit  from  Special  Agent  Shaver.  And  information  that's  actually 

14  already  admitted  on  the  SD  card,  ma'am. 

15  [Pause] 

16  MJ:  Okay.  I  understand  what  you're  talking  about. 

17  ADC [MAJ  HURLEY]:  Ma'am,  if  I  may  add  another  thing. 

18  MJ:  Yes. 

19  ADC [MAJ  HURLEY]:  The  content  that  we  would  also  submit  to  the 

20  Court  is  quite  different  and  not  appropriate  for  rebuttal.  The 

21  content  that  the  —  the  conversation  that  he  had  with  Sergeant 

22  Sadtler  and  the  —  and  the  information  that  he  talked  about  with 

23  Specialist  Marshal,  the  nature  of  that  information  is  quite 
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1  different.  So  I  wanted  to  add  that  additional  bit  of  information. 

2  MJ:  Well,  you  —  government,  you've  already  got  the  Lamo  chats 

3  in  May  of  2010,  right? 

4  ATC [CPT  OVERGAARD] :  Yes,  Ma'am. 

5  MJ:  Is  this  evidence  going  to  provide  anything  additional  that 

6  I  don't  already  have  with  the  Lamo  chats? 

7  ATC[CPT  OVERGAARD]:  One  moment,  please,  ma'am. 

8  [Pause] 

9  ATC [CPT  OVERGAARD]:  Ma'am,  the  government  does  believe  that  this 

10  --  this  adds  to  the  Lamo  chats  because  this  line  isn't  in  Lamo  chats, 

11  and  the  defense  has  just  actually  argued  that  the  Lamo  chats  show 

12  good  motive  on  the  part  of  the  defense  for  the  —  that  same  time 

13  period  —  our  noble  motive. 

14  [Pause] 

15  MJ:  All  right.  I'll  admit  this,  too.  I  think  it  does  rebut  the 

16  motive  evidence,  and  the  motive  evidence  has  been  raised.  So  go 

17  ahead. 

18  ATC [CPT  OVERGAARD]:  The  United  States  also  requests  to  recall 

19  Special  Agent  Shaver  to  discuss  emails  the  accused  sent  to  members  of 

20  the  media,  as  well  as  WikiLeaks  Tweets  that  were  found  on  the 

21  accused's  personal  Macintosh  computer  to  rebut  the  evidence  offered 

22  by  the  defense  that  WikiLeaks  operated  as  a  journalistic  organization 

23  and  was  considered  legitimate  journalist  organization  at  least  by 
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Professor  Benkler. 

MJ:  Defense? 

ADC [MAJ  HURLEY]:  Yes,  ma'am.  It's  our  position  that  Special 

Agent  Shaver,  a  computer  expert  —  that  the  information  that  he  would 
elicit  would  then  require  a  conclusion  by  the  trier  of  fact.  The 
expertise  doesn't  match  up.  Professor  Benkler  said,  in  his  expert 
opinion,  he  does  consider  WikiLeaks  a  legitimate  news  organization. 
And  Special  Agent  Shaver;  that's  not  the  area  in  which  his  expertise 
lays.  And  the  government's  been  aware  for  months  and  we've  litigated 
the  notion  of  whether  or  not  Professor  Benkler  would  testify  and  this 
information  could  have  very  well  come  out  in  the  government's  case  in 
chief.  And  they  —  they  knew  and  understood  its  import  —  it's  not 
as  though  they  learned  first  that  Professor  Benkler 's  testimony  -- 
heard  it  on  the  stand,  and  that  caused  them  to  revisit  and  relook  at 
this  information.  They  knew  it  all  along. 

MJ:  Well,  is  the  standard  it  could  have  come  out  in  the  case  in 

chief,  or  is  it  the  standard  that  the  defense  brought  out  information 
and  the  government  is  now  bringing  information  to  rebut  what  the 
defense  brought  out? 

ADC [MAJ  HURLEY]:  Well,  you're  —  ma'am,  the  —  you're  right  that 
that  adequately  describes  it.  But  from  the  accused's  perspective 
they  —  the  government  was  well  on  notice  is  what  we  would  say 
because  of  the  extensive  litigation  that  we  did  —  because  of  the 
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1  notice  we  provided  in  October  and  the  extensive  litigation  that  we 

2  did  about  Professor  Benkler  that  they  were  aware  of  it,  and  they 

3  could  have  adduced  that  evidence,  and  should  have  adduced  that 

4  evidence  at  this  time.  And  we  would  ask  that  in  your  discretion,  you 

5  foreclose  their  ability  to  put  this  evidence  on  now. 

6  MJ:  Why  would  they  not  introduce  it  in  rebuttal  to  counteract 

7  the  evidence  defense  introduced? 

8  ADC [MAJ  HURLEY]:  May  I  have  a  moment. 

9  [Pause] 

10  ADC [MAJ  HURLEY]:  Ma'am,  we  would  point  the  Court's  attention 

11  to  a  case  we'll  give  you  at  the  close  of  these  proceedings  --  The 

12  United  States  v.  Murphy,  33  MJ  323,  which  is  a  Court  of  Military 

13  Appeals  case.  And  that  indicates  —  we  cite  it  for  the  proposition 

14  that  a  trial  counsel  who  holds  back  material  evidence  for  possible 

15  use  in  rebuttal  to  ambush  the  defense  runs  the  risk  that  the  Military 

16  Judge,  in  the  exercise  of  your  control  of  the  Courtroom  and  your 

17  control  of  the  evidence,  would  foreclose  their  right  —  their  ability 

18  to  put  that  evidence  on. 

19  MJ:  All  right.  I'll  take  this  one  under  advisement  and  have  an 

20  opportunity  to  look  at  the  case. 

21  ADC [MAJ  HURLEY]:  Yes,  ma'am.  Thank  you. 

22  ATC [CPT  OVERGAARD] :  The  government  would  just  offer  that  the 

23  government  contested  the  relevance  of  the  majority  of  Professor 


10414 


o 


9 


1  Benkler's  testimony  from  day  one.  So  the  government  didn't  know  what 

2  was  going  to  be  elicited  and  what  the  Court  was  going  to  allow  from 

3  Professor  Benkler.  And  the  government  is  assuming  that  defense  is 

4  going  to  use  that  testimony  to  argue  that  the  accused  knew  what  he 

5  did  about  WikiLeaks.  And  these  particular  emails,  and  these  Tweets 

6  that  are  found  on  his  —  his  digital  media,  which  is  actually  already 

7  admitted  --  these  just  aren't  pulled  out  of  --  would  go  directly  to 

8  rebut  that. 

9  MJ:  Okay. 

10  ATC [CPT  OVERGAARD] :  Ma'am,  the  United  States  also  asks  to  recall 

11  Special  Agent  Shaver  to  discuss  how  Wget  was  run  from  the  accused's 

12  profile  on  a  SIPRNET  computer  to  counteract  the  testimony  of  Chief 

13  Ehresman  that  executable  files  could  be  run  off  a  disk.  And  based  on 

14  some  of  the  questions  the  Court  asked  during  917,  the  government 

15  would  also  add  that  we  would  like  to  call  Special  Agent  Shaver  to 

16  talk  about  videos  and  music  files  and  how  they  are  run  as  well  just 

17  to  explain  and  counteract  the  evidence  offered  by  Chief  Ehresman. 

18  MJ:  So  are  you  asking  me  to  allow  Special  Agent  Shaver's 

19  testimony  in  rebuttal  or  to  reopen  your  case  as  part  of  the  R.C.M. 

20  917  motion  or  both? 

21  ATC [CPT  OVERGAARD]:  One  moment.  Your  Honor. 

22  [Pause] 

23  ATC [CPT  OVERGAARD]:  Ma'am,  the  government  believes  this  is  just 
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1  rebuttal  evidence  as  it  just  will  go  the  clarify  that  Wget  was 

2  introduced  on  the  computer.  And  this  —  Special  Agent  Shaver  will  be 

3  able  to  show  that  in  his  rebuttal. 

4  MJ:  All  right.  Defense? 

5  ADC [MAJ  HURLEY]:  Ma'am,  first,  with  respect  to  the  last  bit  of 

6  argument  that  we  had,  I  apologize  for  not  doing  it  then,  if  the 

7  defense  could  just  receive  the  exact  Tweets  and  emails  that  the 

8  government's  talking  about.  We  recognize  Special  Agent  Shaver 

9  perhaps  isn’t  here  today  at  1820  to  talk  about  it,  but  just  so  that 

10  we  could  start  our  preparation  and  just  have  some  understanding  of 

11  what  that  —  that  information  is. 

12  Secondly,  and  to  the  reason  that  you  called  on  me  just  now, 

13  it's  the  position  of  defense  that  Special  Agent  Shaver's  already 

14  testified  about  this,  unless  I  misunderstood  Captain  Morrow's 

15  argument  when  he  was  talking  about  the  1030  offense,  and  Wget,  and 

16  the  uses  of  Wget,  it  seemed  to  me  as  I  was  listening  to  it  —  as  the 

17  defense  was  listening  to  it,  that  this  testimony  was  already  covered. 

18  He  was  citing  the  testimony  of  Special  Agent  Shaver  for  these 

19  propositions.  There's  no  need  to  rebut  information,  ma’am,  that  — 

20  you're  a  sophisticated  trier  of  fact,  you  can  be  called  upon  to 

21  recall  Special  Agent  Shaver's  testimony  as,  in  fact,  you  have  been 

22  today.  And  —  and  there's  no  need  to  bring  him  back  to  say 

23  essentially  the  same  thing. 
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1  MJ:  Is  Special  Agent  --  well,  first  of  all,  with  respect  to  the 

2  discovery,  any  issues? 

3  ATC [CPT  OVERGAARD] :  No,  ma'am. 

4  MJ:  All  right,  so  that'll  be  done  tonight? 

5  ATC [CPT  OVERGAARD]:  Yes,  Ma'am. 

6  MJ:  Okay.  Is  he  going  to  —  is  Special  Agent  Shaver  going  to 

7  testify  - 

8  TC[MAJ  FEIN]:  I'm  —  I'm  sorry,  ma'am,  just  to  interrupt;  not 

9  tonight.  We  could  probably  have  it  done  tomorrow.  Special  Agent 

10  Shaver  is  not  around.  So  we  can  --  we  can  - 

11  MJ:  You  have  the  Tweets  and  the  —  the  information  - 

12  TC [MAJ  FEIN]:  We  have  —  ma'am,  we  have  copies,  but  not  —  it's 

13  not  going  to  be  the  exact  copies  that  he  would  be  authenticating  at 

14  trial,  so  we  can  provide  copies,  but  not  the  actual  ones.  We  need  him 

15  here  physically  to  do  that. 

16  ADC [MAJ  HURLEY]:  Ma'am,  copies  are  fine. 

17  MJ:  Okay. 

18  ADC [MAJ  HURLEY]:  For  the  purpose  of  helping  us  prepare. 

19  TC [MAJ  FEIN]:  Tonight. 

20  MJ:  They  want  the  information  that  you're  going  to  use  — 

21  TC [MAJ  FEIN]:  They'll  have  it  tonight,  ma'am. 

22  MJ:  —  I  don't  think  they  care  about  the  format.  Okay.  Is 

23  Special  Agent  Shaver  going  to  testify  to  anything  he  hasn't  testified 
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about  already? 

[Pause] 

MJ:  And  as  you're  answering  that,  my  follow-up  question  is  — 

because  I  won't  have  that  in  front  of  me  right  now,  did  he  do  that 
testimony  in  classified  —  in  closed  session  or  did  he  do  it  in  open 
session  when  he  addressed  these  issues? 

ADC [MAJ  HURLEY]:  Ma'am,  the  other  thing  to  discuss  is  when  the 
Court  would  want  notice  of  our  surrebuttal.  And  we  can  table  that 
for  whenever  that's  appropriate  to  talk  about. 

MJ:  We  can  talk  about  that.  We're  going  to  meet  after  the 

trial  - 

ADC [MAJ  HURLEY] :  Thanks,  ma'am. 

MJ:  -  or  after  the  proceedings  today. 

ADC [MAJ  HURLEY] :  Yes,  ma'am. 

[Pause] 

ATC [CPT  OVERGAARD] :  Ma'am,  we  believe  that  —  the  government 
believes  that  Special  Agent  Shaver  did  actually  testify  that  Wget  was 
run  from  the  accused  profile.  But  based  on,  you  know,  the  testimony 
of  CW2  Ehresman  that  executable  files  can  be  run  on  off  a  disk 
potentially,  and  some  of  the  questions  from  the  Court,  the  government 
just  seeks  to  recall  Special  Agent  Shaver  to  further  explain  and 
clarify  how  Wget  was  run  and  where  it  was  located. 

[Pause] 
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1  MJ:  Well,  this  will  be  a  conditional  ruling  because  it  all 

2  depends  on  how  I  rule  on  the  917  motion  with  respect  to  that  offense, 

3  because  otherwise  it's  not  relevant,  right? 

4  ATC [CPT  OVERGAARD] :  It's  —  it  would  still  potentially  be 

5  relevant,  ma'am,  to  unauthorized  software  in  Charge  III, 

6  Specifications  2  and  3. 

7  MJ:  Oh,  okay.  Yes  [speaking  to  the  defense] . 

8  ADC [MAJ  HURLEY]:  Ma'am,  the  other  thing  that  we  would  point 

9  the  Court's  attention  to  is  the  testimony  of  Captain  Cherepko,  who 

10  also  testified  about  how  these  files  could  be  run  from  a  disk.  Just 

11  to  say  that  there's  a  —  the  panoply  of  evidence  that  the  Court  can 

12  consider  in  making  its  findings  that  already  exist  in  the  record  and 

13  there  is  no  need  to  call  a  rebuttal  witness  for. 

14  [Pause] 

15  MJ:  All  right,  once  again,  from  the  Court's  recollection  of  the 

16  testimony,  there  have  been  a  variety  of  different  witnesses  who've 

17  testified  different  things  how  Wget  operates  and  how  its  run.  So  I 

18  will  allow  that. 

19  ATC [CPT  OVERGAARD]:  United  States  would  also  like  to  recall  an 

20  undetermined  at  this  point,  additional  forensic  investigator  or 

21  witness  to  discuss  how  the  WikiLeaks.org  website  appeared  in  2009  and 

22  2010  to  expound  upon  and  counteract  the  evidence  offered  by  the 

23  defense  that  WikiLeaks  offered  it  as  a  journalistic  organization 
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1  elicited  through  Professor  Benkler. 

2  MJ:  So  Special  Agent  Shaver  can't  testify  about  that? 

3  ATC [CPT  OVERGAARD] :  No,  Ma’am. 

4  M J:  Yes  [speaking  to  the  defense]. 

5  ADC[MAJ  HURLEY]:  One,  the  defense  just  expresses  its 

6  frustration  that  we' re  talking  still  about  a  mystery  guest  that  we 

7  can’t  identify  —  we're  talking  still  about  mystery  guest,  ma’am,  we 

8  can’t  identify  with  any  specificity  who  this  witness  is  that  is  going 

9  to  talk  about  how  the  WikiLeaks  website  appeared  in  2009  and  2010. 

10  The  government's  indicated  there  today,  again,  it's  the  position  of 

11  defense,  ma'am,  we  —  we're  moving  this  argument  around,  but  it's  the 

12  position  of  the  defense  that  they've  had  months.  They  were  —  they 

13  knew  why  we  ultimately  wanted  to  get  Professor  Benkler  in  here  to 

14  talk.  And  they  could  have,  certainly  if  nothing  else,  identified  a 

15  witness  in  this  rebuttal  document  as  to  how  they  were  going  to 

16  counteract  that  testimony.  So  that  would  be  our  first  objection  is 

17  that  you  foreclose  the  opportunity  because  this  is  the  notice  they 

18  had,  this  is  the  time  they  had  to  file  it,  and  if  they  can’t  identify 

19  anyone,  ma'am,  then  they  should  not  be  allowed  to  call  this 

20  individual. 

21  Second,  we  would  submit  to  you  there’s  evidence  about  how 

22  the  WikiLeaks  website  appeared  in  2009  and  2010  already  in  the  record 

23  that  we've  gone  through,  discussed,  objected,  filings  on,  and  has 


10420 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


J 


been  produced.  It's  here  or  it's  not  here.  That's  sufficient.  And 
whoever  this  witness  is,  whatever  they  might  say,  is  not  relevant  for 
the  Court's  consideration.  Thank  you. 

MJ:  Okay.  Well,  first  of  all,  let's  talk  about  the  defense's 

first  objection.  I  mean,  you  have  had  —  you  have  had  —  you've  had 
more  than  a  month  —  we'll  you've  had  months  since  we  litigated  the 
Motion  to  Compel  Professor  Benkler. 

ATC [CPT  OVERGAARD] :  Yes,  ma'am.  How  - 

MJ:  Why  are  we  here  now? 

ATC [CPT  OVERGAARD]:  However,  the  government  did  not  know  how 
much  testimony  the  Court  would  allow  from  Professor  Benkler.  And  how 
you - 

MJ:  That  means  you  do  no  preparation  and  you  wait  until  when 

you  get  the  relevance  ruling  and  then  you  start? 

ATC [CPT  OVERGAARD]:  Ma'am,  the  government  did  not  know  how  much 
the  Court  was  going  to  allow  Professor  Benkler.  And  the  government 
has  contested  the  relevance  of  any  of  his  testimony  since  day  one. 

MJ:  All  right.  What's  your  second  objection?  I  mean,  what's 

your  second  —  or  your  position  with  respect  to  the  second  basis  by 
the  defense  that  basically  the  most  wanted  list  and  the  Tweets  are 
already  in  evidence? 

ATC [CPT  OVERGAARD]:  The  government  would  say  that  —  that  that 
is  some  evidence  of  what  was  on  WikiLeaks.org  website,  but  there  is 
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more  evidence  of  what  appeared  on  the  home  page,  for  example,  that 
would  still  inform  and  counteract  the  evidence  offered  that  WikiLeaks 
operated  as  a  journalistic  organization.  And  the  government  agrees 
that  if  the  government  does  not  have  this  witness  by  Thursday,  we  are 
foreclosed  from  moving  forward.  However,  until  that  time,  government 
would  just  request  some  --  some  latitude,  and  we  had  one  business  day 
since  the  defense's  case  closed. 

ADC [MAJ  HURLEY]:  Again,  with  respect  to  Captain  Overgaard,  I 
find  that  statement  disappointing.  The  government's  had  much  more 
time  than  that.  And  they  —  they  can  make  an  assumption.  FM  101-5-1 
asks  Army  officers  to  make  assumptions  every  day.  This  is  a 
legitimate  assumption,  and  they  could  vet  it  or  not  vet  it.  And 
that's  a  frustration.  Ma'am,  the  —  the  other  thing  that  we  would 
want  to  talk  about  is  —  at  least  what  the  government  could  describe 
for  us  today,  not  72  hours  from  now,  but  today,  is  what  they  believe 
this  evidence  could  be.  It's  an  admonition.  It's  a  mission 
statement.  It's  a  page.  It’s  a  thing.  It's  a  picture  that  says  X, 

Y  or  Z,  and  we'll  find  a  witness  to  catch  up  to  it  in  a  minute. 

Something.  And  the  general  nature  of  the  notice  they  provided  to 
this  Court,  provided  to  defense,  provided  to  my  client;  PFC  Manning 

is  not  sufficient.  And  we  would  ask  that  you  foreclose  this 

opportunity  today  and  wait  no  longer. 

TC [MAJ  FEIN]:  Ma'am,  if  I  may,  only  'cause  Captain  Overgaard 
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1  wasn't  at  the  802  conference  when  the  parties  discussed  this  with  the 

2  Court,  and  to  clear  up  the  record  here  is  that  when  the  —  when  the 

3  parties  met  with  the  Court  to  discuss  the  case  calendar  for  the 

4  rebuttal,  the  government  made  a  point  that  —  and  this  was  Wednesday 

5  after  the  close  of  the  session,  that  because  we  were  responding  to  — 

6  the  United  States  was  responding  to  the  R.C.M.  917  motion,  that  we 

7  did  not  have  adequate  time,  because  the  government  —  the  defense 

8  closed  its  case  so  —  so  quickly  to  prepare  for  the  rebuttal  case  and 

9  litigate  those  motions.  And  all  the  parties  agreed  with  —  and  with 

10  the  Court,  that  although  we  would  file  by  Monday  morning  09,  that 

11  only  give  us  one  business  day  on  Friday  to  identify  people  available 

12  and  where  they  could  come  from  and  who  they  were.  And  that  we'd 

13  provide  as  much  notice  as  possible  and  then  continue  working  on  it. 

14  And  that's  exactly  what  we  did.  This  was  discussed  ahead  of  time, 

15  Your  Honor  —  this  part  of  it. 

16  MJ:  Major  Fein,  I  understand  all  that.  Where  --  I'm  having 

17  problems  with  is  you  knew  Professor  Benkler  was  testifying  for 

18  months,  why  didn't  —  and  you  made  no  effort  to  pull  any  of  these 

19  websites  he's  --  either  cross-examine  him  or  have  somebody 

20  potentially  online  in  rebuttal?  I  mean,  you  knew  what  he  was  going 

21  to  testify  about. 

22  TC [MAJ  FEIN]:  Ma'am,  we  actually  do  have  people  on  line.  The 

23  problem  is  trying  to  find  them.  We  have  one  witness  —  one  person 
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identified,  as  of  yesterday,  was  emailed  —  he's  going  to  be  —  I 
guess  he's  deployed  or  out  of  town  for  official  business  —  a  U.S. 
government  employee  —  gave  us  two  other  leads  and  two  other 
organizations  that  pulled  the  website.  These  can't  be  just  any 
individual,  it  has  to  be  a  specific  individual  who  pulled  the  website 
in  2009-2010  timeframe  —  individuals  who  as  part  of  their  normal 
course  of  business  —  just  like  the  internet  archive,  grabs 
information  and  brings  it  down.  And  that's  what  issue  is,  Your 
Honor.  A  U.S.  government  official  was  identified,  he  is  no  longer 
available  this  week,  and  now  we're  trying  to  find  the  other 
individuals.  And  he's  assisting  us.  That  was  back  Friday  —  it  was 
actually,  before  Friday  that  we  were  trying  to  work  on  this  to  get 
the  exact  identification  of  the  individual.  But  we  only  really  had 
Friday  to  —  to  —  do  that  full  time.  And  in  reference  to  your 
question,  Your  Honor,  about  Professor  Benkler;  Professor  Benkler, 
testified  he  never  looked  at  the  website,  and  he  didn't  spend  that 
much  time.  He  relied  on  the  press  articles.  That  was  the  substance 
of  his  entire  —  his  entire  testimony. 

MJ:  But  that  didn't  preclude  the  government  from  showing  them 

to  it  —  having  any  evidence  and  cross-examining  him  on  it. 

TC [MAJ  FEIN]:  Your  Honor,  that  is  correct,  we  could  have  pulled 
the  website  ourselves  and  done  that.  It  doesn't  mean  it's  authentic, 
but  we  could  have  done  that.  So  now  what  —  what  we're  are  asking 
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1  for  is,  in  order  to  —  in  rebuttal,  is  to  potentially  —  if  we  can 

2  get  the  evidence  and  get  the  right  witness  by  the  time  set  by  the 

3  Court,  is  to  admit  the  evidence,  with  a  knowledgeable  witness  on  what 

4  it  actually  looked  like.  And  that  allows  us  to  counteract  the 

5  testimony  of  Professor  Benkler. 

6  MJ:  Yes  [speaking  to  the  defense]? 

7  ADC [MAJ  HURLEY]:  Ma'am,  may  I  be  heard  on  the  —  the  schedule 

8  --  very  limited  --  very  limited  weight.  The  government  indicated  the 

9  time  it  needed  with  the  Court;  the  Court  okayed  it.  What  we  —  we 

10  certainly  —  and  we  were  sitting  there  most  assuredly.  What  we 

11  certainly  didn't  consent  to  on  any  level,  ma'am,  whatsoever  period 

12  was  the  receipt  of  a  rebuttal  witness  that  was  a  question  mark.  And 

13  that's  what  the  government's  done  in  this  case.  And  that's  where  we 

14  would  have  objection  and  we  would  ask  you  to  stop  this  from  going 

15  forward  for  another  moment.  Thank  you. 

16  MJ:  All  right,  I'm  going  take  this  one  under  advisement  as 

17  well.  Next? 

18  ATC [CPT  OVERGAARD] :  The  United  States  also  would  like  to  recall 

19  Mr.  Milliman  to  explain  what  or  what  was  not  authorized  on  a  DCGS-A 

20  machines.  And  this  would  specifically  go  to  what  he  may  or  may  not 

21  have  told  Chief  Ehresman. 

22  MJ:  Well,  you're  recalling  Chief  Ehresman  anyway,  right? 

23  ATC [CPT  OVERGAARD]:  Potentially,  ma'am.  We  need  to  reach  out  to 
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1  him  again  based  on  the  email  that  we  just  received. 

2  MJ:  Defense? 

3  ADC [MAJ  HURLEY]:  Ma'am,  it's  the  first  position  of  the 

4  defense  that  much  like  Special  Agent  Shaver,  I  believe,  with  respect 

5  to  the  Wget  information,  Mr.  Milliman's  already  testified  to  this  — 

6  that  he's  already  covered  what  he  understands  is  authorized,  what  he 

7  understood  was  not  authorized.  On  direct  examination  —  and  I'm 

8  using  the  official  transcript,  he  was  asked  if  he  recalls  if  Wget  was 

9  authorized  executable  file?  He  said  he  didn't  understand.  On  cross- 
10  — 

11  MJ :  I'm  sorry,  say  that  one  more  time. 

12  ADC [MAJ  HURLEY]:  On  direct  examination  he  was  asked  if  he  — 

13  if  he  recalls  if  Wget  was  an  authorized  executable  file  —  and  that 

14  question  was  posed  by  Captain  Hunter  Whyte  —  and  his  answer  was  that 

15  he  does  not  recall  that.  On  cross-examination,  he  talked  with  Mr. 

16  Coombs  during  the  cross-examination  about  the  method  though  which  he 

17  would  vet  whether  or  not  something  was  authorized  or  not  authorized. 

18  So  it's  the  position  of  the  defense,  ma'am,  this  information 

19  government  wants  to  recall  Mr.  Milliman  for  has  been  well  and  truly 

20  covered  during  its  merits  case. 

21  MJ:  When  did  you  call  Mr.  Milliman? 

22  ATC [CPT  OVERGAARD] :  Ma'am,  just  factually,  the  United  States 

23  would  point  out  that  none  of  the  elicited  testimony  about  what  could 
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or  not  be  run  from  a  CD. 

ADC [MAJ  HURLEY]:  Ma'am,  answer  to  the  Court's  question,  the 

unofficial  draft  that  we  have  is  12  June  2013. 

MJ:  12  June.  Thank  you. 

[Pause] 

MJ:  So,  Captain  Overgaard,  if  I'm  understanding,  you're  calling 

him,  and  you're  going  to  limit  is  testimony  solely  to  CDs? 

ATC [CPT  OVERGAARD]:  Yes,  Ma'am.  Whether  or  not  you  can  run 
otherwise  unauthorized  programs  and  executable  files  from  a  CD,  and 
whether  he  would  have  told  Chief  Ehresman  that. 

MJ:  I  don't  believe  Mr.  Milliman  testified  about  CDs. 

ADC [MAJ  HURLEY]:  Ma'am,  I  don't  recall,  but  just  a  point  of 

clarification,  it  —  would  you  like  —  the  response  of  the  defense  to 
that  query  is  we  don't  recall  what,  if  anything,  Mr.  Milliman  said 
about  that.  I'd  have  to  take  a  look  at  his  testimony,  ma'am.  The 
clarification  we  would  like  is  —  is  it  that  the  running  from  a  CD 
wasn't  allowed?  Is  that  the  point  of  evidence  that  they  —  the 
government  wants  to  get?  Or  that  it  wasn't  authorized?  Not  allowed 
or  physically  impossible;  and  those  are  --  those  are  the  two  aspects 
of  the  field  that  we're  trying  to  figure  out. 

MJ:  Captain  Overgaard? 

ATC [CPT  OVERGAARD]:  I  would  ask  him  about  both,  ma'am. 

MJ:  Okay. 
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1  ADC [MAJ  HURLEY] :  Yes,  ma'am. 

2  MJ:  All  right.  I'll  let  you  recall  him  to  do  that,  yes. 

3  ADC [MAJ  HURLEY]:  I  was  going  to  restate  our  position,  but  I 

4  think  the  Court  is  well  aware  of  our  position. 

5  MJ:  Yep.  If  you're  limiting  it  to  that;  I  don't  want  a 

6  recitation  of  his  direct  testimony  again. 

7  ATC [CPT  OVERGAARD] :  Yes,  ma'am.  And  the  United  States  would 

8  also  request  that  the  Court  take  judicial  notice  of  the  entire  "Good 

9  Soldiers"  by  David  Finkel  book. 

10  MJ:  Any  objection? 

11  ADC [MAJ  HURLEY]:  Yes,  ma'am,  we  would  just  —  we  don't  — 

12  we're  at  a  loss  to  understand  its  relevance  —  the  entirety  of  the 

13  book.  Certainly  the  excerpt  that  we  submitted,  and  the  Court's  taken 

14  judicial  notice  of  —  it's  just  the  entirety  of  the  book  that  we  fail 

15  to  understand  what,  if  any,  relevance  it  has  to  this  particular 

16  matter. 

17  MJ:  What  is  the  relevance? 

18  ATC [CPT  OVERGAARD]:  Ma'am,  there's  other  information  in  the  book 

19  that  would  have  informed  the  accused' s  knowledge  of  what  should  or 

20  should  not  have  been  released.  In  particular,  Mr.  Finkel  included  a 

21  note  on  sources  and  methods  and  their  deliberate  exclusion  from  the 

22  book.  And  also  the  book  would  reveal  that  not  the  entire  Apache 

23  video  transcript  was  released  in  the  book. 
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ADC [MAJ  HURLEY]:  Ma'am,  we  would  next  ask  what  portion  of  the 

book  and  what  evidence  that  the  government  has  that  PFC  Manning  has 
read  those  passages. 

ATC [CPT  OVERGAARD] :  It's  evidenced  in  the  Lamo  chats  that  the 
accused  referred  to  the  Finkel  book.  If  defense  doesn't  plan  on 
arguing  that  the  accused  read  and  understand  the  book,  then  that 
would  change  the  government's  argument. 

MJ:  Now  I  am  completely  confused.  What  —  what  —  what  do  you 

mean? 

ATC [CPT  OVERGAARD]:  Part  of  --  part  of  the  reason  the  government 
was  making  this  argument  in  the  first  place  is  because  the  government 
assumed  that  the  defense  —  the  relevance  of  the  book  and  the  point 
defense  was  trying  to  make  in  taking  judicial  notice  was  that  the 
accused  was  on  notice  of  some  of  the  alleged  information  in  the 
Apache  being  released.  Now  if  that's  not  defense's  contention,  then 
government  may  —  may  have  a  different  position. 

ADC [MAJ  HURLEY]:  Ma'am,  we  offered  that  evidence  —  the 

transcript  —  the  portion  of  the  book  that's  transcribed  to  undermine 
the  idea  that  this  is  information  that  could  be  damaging  --  not 
that's  closely  held  or  could  aid  a  foreign  nation.  It  was  for  that 
purpose  this  is  transcript,  it's  been  out  in  a  book.  It's  been  out 
in  a  book  since  published  in  2009  as  I  recall  —  that's  when  I  first 
read  it.  So  it's  that  information  and  that  point  of  law  that  we  — 
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that  we  sought  the  Court  to  take  judicial  notice  of  this  matter.  And 
you  have  taken  judicial  notice  of  it.  So  that's  the  point.  It's  not 
what,  if  any,  notice  it  provided  the  accused.  It's  what  was  out 
there  in  the  world  about  this  engagement  or  not  out  there.  And  it's 
the  position  of  defense  —  I  believe  we've  well  and  truly  established 
that  this  transcript  of  these  radio  calls  was  out  there  and  was  the 
subject  of  a  good  deal  of  public  knowledge. 

MJ:  So  the  defense  is  not  offering  this  for  the  element  that 

PFC  Manning  had  reason  to  believe  that  the  information  could  —  I 
need  to  get  the  exact  words,  but  the  - 

ADC [MAJ  HURLEY]:  Ma'am,  I'll  let  Mr.  Coombs  —  if  the  Court 

has  additional  questions. 

CDC [MR .  COOMBS]:  On  that  they  —  he  was  in  the  Lamo  chat  —  I 

guess  the  defense's  position  on  this  is  where  PFC  Manning  was  and  at 
the  time  of  the  publication  of  the  book,  the  Lamo  chat  talks  about 
the  fact  he  saw  online  that  Finkel  talked  about  this.  And  even 
though  this  is  not,  hasn't  been  introduced  into  evidence,  the  Court 
can,  I  guess,  consider  just  about  anything  on  making  this  ruling  — 
the  excerpt  of  the  Finkel  book  that  we  referenced  was  available 
online.  That  was  when  you  went  to  Amazon  in  order  to  look  at  it, 
that  was  the  excerpt  that  they  —  they  released.  There's  no  evidence 
that  my  client  read  the  book.  So  my  client  was  aware  of  the  Finkel 
book.  He  was  aware  of  the  excerpt  and  the  fact  that  it  quoted  it 
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verbatim  because  it's  in  the  Lamo  chats.  So  we  would  offer  it  not 
only  for  the  fact  to  show  it  is  not  closely  held,  but  reason  to 
believe  on  the  part  of  my  client.  What's  missing  here,  I  guess,  is 
the  connection  —  because  I  haven't  read  the  whole  book  but  if 
there's  other  things  in  the  book,  there's  been  no  evidence  that  PFC 
Manning  read  those  other  things.  And,  in  fact,  when  you  look  at  the 
Lamo  chat,  it's  clear  that  he  saw  it  online.  And  the  book  has  never 
been  released  online;  just  that  excerpt.  So  our  position  would  be 
that  the  —  the  judicial  notice  request  - 

MJ:  Well,  that's  not  before  me  in  evidence  that  the  book  isn't 

online,  and  released  online,  and  none  of  the  rest  of  the  book  is 
online . 

CDC [MR .  COOMBS]:  I  grant  you  that.  Your  Honor.  The  defense's 

position  though  would  be  the  judicial  notice  --  judicial  notice 
request  --  the  relevance  of  that  would  only  be  if  they  could  show 
that  PFC  Manning  read  those  other  excerpts.  Because  apparently  what 
Captain  Overgaard  just  stated  there  is  some  other  provisions, 
footnotes,  or  whatnot,  that  may  give  you  some  notice  and  that  goes 
towards  apparently  their  104  offense.  But,  again,  that  would  only  be 
relevant  if  you  show  that  PFC  Manning  read  that.  So  what  the  Court 
would  have  the  benefit  of,  I  guess,  is  the  Finkel  reference  in  the 
Lamo  chats,  and  whether  or  not  you  believe  that  would  mean  that  PFC 
Manning  must  have  read  the  book  and,  therefore,  it's  relevant. 
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judicial  notice  should  be  granted,  or  no  evidence  that  he  read  the 
entire  book  and,  therefore,  it  should  not  be  granted. 

MJ:  Okay.  Let  me  ask  one  more  question.  The  portion  of  the 

book  —  you're  offering  this  for  two  reasons;  one  is,  the  closely 
held,  and  the  other  one  is  the  reason  to  believe.  Now  with  respect 
to  the  closely  held;  there's  two  pieces  of  evidence  you're  looking 
for  with  judicial  notice  for  the  book;  one  is  the  --  his  footnotes  or 
whatever  on  sources  and  methods,  and  the  other  one  is  that  --  not  the 
entire  transcript  was  published.  What's  --  what's  the  second  one? 

ATC [CPT  OVERGAARD] :  Yes,  Ma'am.  One  is  the  —  a  specific  page 
called  note  on  sources  and  methods.  And  the  for  the  book  in  the 
entirety  it's  just  to  show  the  Court  that  the  entire  the  book  was  not 
closely  held  —  the  —  the  video  was  not  closely  held.  Hard  time, 
sorry,  ma'am.  Not  all  of  the  information  in  the  video  was  revealed 
in  the  book. 

MJ:  And  there's  something  else  in  the  book  that  says  that? 

ATC [CPT  OVERGAARD]:  No,  ma'am. 

MJ:  That's  what  I  thought  I  heard  you  say  in  the  beginning. 

ATC [CPT  OVERGAARD]:  No,  ma'am. 

MJ:  Maybe  I  misunderstood  what  you  said. 

ATC [CPT  OVERGAARD]:  No. 

CDC [MR .  COOMBS]:  Ma'am,  I  guess  on  the  closely  held  part,  you 

know,  we  —  the  defense  will  stipulate  that  the  entire  video  is  not 
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verbatim  in  Mr.  Finkel ' s  book.  That  kind  of  loses  the  point  though. 
The  point  is  that  Mr.  Finkel  had  a  copy  of  the  video.  So  then,  the 
video  wasn't  closely  held  in  order  to  quote  the  video.  So  the 
passages  in  the  book  that  do  quote  the  video,  quote  it  verbatim.  And 
it  certainly  is  not  a  complete  verbatim  transcript.  That's  why  you 
have  what  the  defense  offered,  a  verbatim  transcript  of  PE  15. 

That's  certainly  not  in  the  book.  So  for  that  fact,  the  defense 
would  stipulate  that  a  verbatim  transcript  of  PE  15  is  not  contained 
in  the  book  as  far  as  the  higher  transcript.  But  what  is  in  the  book 
is  verbatim  from  the  video. 

MJ:  Okay.  But  I  remember  back  from  day  one  —  this  is  why  we 

watched  the  whole  video. 

ATC [CPT  OVERGAARD] :  Well,  there's  —  there's  actually  no 
evidence  in  the  book  that  he  watched  the  video  —  that  Mr.  Finkel 
watched  the  video. 

MJ:  Is  there  any  other  evidence  besides  —  besides  the  passages 

passed  by  the  —  the  passages  the  defense  asked  me  to  take  judicial 
notice  that  address  the  video  in  any  way;  explain  why  —  that  he  had 
the  video,  explain  a  footnote,  why  it's  there? 

TC [MAJ  FEIN]:  Your  Honor,  once  again.  I'll  take  over  from  this 
point  because  I  read  the  book.  Your  Honor,  there's  no  evidence  in 
the  book  on  whether  Mr.  Finkel  ever  saw  a  video.  That's  conjecture 
on  the  defense's  part.  Now  we  have  agreed  that  there's  a  stipulated 
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transcript  of  the  video.  And  the  defense  is  going  to  argue,  we 
assume  in  closing,  that  as  the  Trier  of  Fact,  you  should  read  the 
two,  read  the  book  excerpts  and  read  this.  But  there's  no  evidence 
that  he  saw  the  video.  There  could  have  been  other  methods  of  Mr. 
Finkel  receiving  that  information.  The  government's  not  arguing  the 
part  that  we  stipulated  to,  which  is  that  is  a  transcript  of  what  was 
made  of  the  video. 

MJ:  All  right.  So  what  I  have  is  circumstantial  evidence  that 

Mr.  Finkel  saw  the  video  or  at  least  - 

TC [MAJ  FEIN]:  For  argument,  yes,  ma'am. 

MJ:  Yes.  So  I  guess  we  are  really  looking  at  this  is  what  — 
so  we're  really  down  now  --  there's  nothing  else  in  the  book  that 
addresses  the  video,  and  the  defense  has  stipulated  to  that,  we're 
done  to  the  sources  and  methods. 

TC [MAJ  FEIN]:  Yes,  ma'am.  And  the  sources  and  methods  chapter 
—  and  —  well,  it's  one  page  in  the  book,  explains  exactly  his 
methodology  of  —  of  how  he  wrote  the  book  and  the  protections  that 
he  gave  and  where  the  sources  of  information  came.  Now  it  does  talk 
about  firsthand  accounts  and  it  talks  about  a  bunch  of  different 
sources  of  how  he  compiled  his  book.  So  if  the  defense  is  able  to 
argue  that  —  that  because  —  make  this  argument  that  —  that  it's  an 
inference  that  he  saw  the  video,  then  this  section  should  be  — 
should  be  relevant  to  possibly  counteract  that.  And  then  for  the 
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second  part,  if  defense  is  able  to  make  the  argument  during  argument 
that  PFC  Manning  read  any  portion  of  the  book,  then  the  entire  book, 
or  at  least  portions  that  we  select  by  Thursday,  should  be  equally 
admissible.  Because  there  is  no  evidence,  even  in  the  chat  logs,  as 
I'm  looking  at  them  now,  that  there  was  a  certain  portion  on  line. 
That  again  is  not  evidence  before  the  court. 

MJ:  I  got  that. 

CDC [MR .  COOMBS]:  The  last  point;  the  evidence  that  there's 

certain  portion  was  available  at  least  is  coming  from  the  Lamo  chats 
where  he  says  Finkel  quoted  the  video  verbatim  —  he  had  copy  of  the 
video.  The  government's  saying  that  there's  no  evidence  that  Mr. 
Finkel  had  a  copy  of  the  video.  Then  essentially  what  they  are 
saying  is,  well,  he  could  have  got  an  audio  version.  So  really  the 
only  way  —  I  mean  I  think  we  all  can  agree  that  Mr.  Finkel  cannot 
predict  without  seeing  the  video  or  at  least  hearing  the  audio  of  the 
video  what  the  Apache  helicopter  crew  would  have  said.  And  clearly 
he  quotes  them  verbatim.  So  he's  either  seen  the  video  or  he's  seen 
—  he's  heard  the  audio  recording.  I'm  unaware  of  just  a  simple 
audio  recording,  but  I'm  sure  if  the  government  was  aware  of  that, 
they  would  have  offered  that  in  evidence  to  rebut  any  idea  that  the 
video  was  not  released. 

MJ:  All  right.  Well,  this  —  this  is  all  for  closing  argument, 
but  right  now  the  —  let  me  look  at  Lamo  chats.  I'll  take  this  under 


10435 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


J 


advisement  once  again.  I  would  like  to  take  a  look  at  the  Lamo  chats 
because  it  seems  to  me  that  if  the  —  there's  nothing  in  there  about 
getting  something  from  an  internet,  then  there  is  circumstantial 
evidence  that  if  you  read  part  of  a  book,  you  read  the  whole  book. 

You  don't  have  to  buy  that,  but  it's  circumstantial  evidence.  And 
the  sources  and  methods,  too,  if  it's  in  one  page  of  a  book  that 
somebody  might  have  read,  it  would  make  a  difference  if  the  book  five 
pages  or  500  pages  as  to  whether  one  would  see  or  remember  that.  So 
I'll  just  take  that  under  advisement  and  see  what  the  Lamo  chats  say. 
But  —  I  mean,  Mr.  Coombs,  if  you  have  any  evidence  that  there  was 
not  some  online  version  or  that  --  other  than  the  book,  I'm  willing 
to  get  it.  But  right  now,  I  just  don't  have  any  evidence  of  it. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  So  what  we  could  do  with 

regards  to  this  judicial  notice  issue,  we  could  pull  the  fact  that  on 
Amazon.com  that  was  the  version  —  that  portion  of  that  book  — 
that's  the  portion  the  book  that  they  show  on  Amazon.com.  Even 
today,  that's  the  portion  of  the  book  that  they  show.  So  when  you  go 
to  Amazon.com  to  purchase  the  book,  or  even  Google  books,  to  purchase 
it,  that's  the  excerpt  they  allow  you  to  read  to  determine  don't  —  I 
want  to  read  the  rest  of  this  book. 

MJ:  If  you  want  to  present  that  as  evidence,  I'm  happy  to  look 

at  it. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 
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MJ:  And  this  actual  judicial  notice;  is  this  something  that  I 

need  to  decide  —  I  mean,  if  I  make  the  rest  of  this  decision,  we 
have  to  decide  how  we  are  going  to  proceed  on  Thursday.  Is  this 
judicial  notice  question  part  of  that?  I  mean,  that's  really  going 
towards  —  is  this  part  of  government's  rebuttal  case  or  is  this 
something  that  can  be  decided  prior  to  closing  arguments? 

TC [MAJ  FEIN]:  Ma'am,  it  can  be  done  any  time  except  for  if  the 
defense  does  intend  to  proffer  evidence  such  as  what  is  on  Amazon  or 
Google,  then  we  would  like  a  chance  to  at  least  rebut  it. 

MJ:  That's  what  I  mean.  So  I  think  I'm  going  to  sever  this 

piece  of  it  and  make  a  decision  —  not  today. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  How  soon  can  you  get  whatever  you're  going  to  give  to  the 

government  so  they  can  take  a  look  at  it? 

CDC [MR.  COOMBS]:  Well,  we  can  pull  a  portion  to  show  the 

government.  If  there's  a  authentication  issue,  we  would  need  to  set 
up  a  person  with  knowledge,  probably  we  would  use  Trent  Struttmann, 
our  forensic  expert,  to  say,  hey,  I  went  there  today,  I  pulled  it. 
The  question  would  be  then,  obviously  what  existed  back  at  the  time 
that  PFC  Manning  might  have  looked  at  it?  For  that,  if  this  becomes 
a  huge  issue,  we  could  employ  the  services  of  Chris  Butler  again  to 
see  if  perhaps  Stanford  or  some  other  organization  employs  him  to 
preserve  Amazon.com. 
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MJ:  Well,  again,  this  —  at  this  point  we  are  operating  under 

M.R.E.  104(a).  So  I  can  consider  hearsay  and  statements  and  all  of 
that.  So  the  standard  for  internet  archived  material  would  not  be 
the  same  as  it  would  be  if  it  was  introduced  at  trial. 

CDC [MR.  COOMBS]:  So  I  could  pull  that  excerpt  and  provide 

that  to  the  government.  And  then  provide  that  to  the  Court  as  well 
by  email,  hopefully  tomorrow.  Which  brings  up  a  point  actually;  with 
regards  to  the  1030  cases  —  parts  —  yeah,  the  1030  case,  we  request 
that  we  actually  get  till  noon  tomorrow  to  provide  those  cases  to 
you . 

MJ:  Okay.  Now  if  I  don't  get  those  —  if  I  get  those  cases  by 

noon,  is  the  government  going  to  need  any  additional  time  other  than 

ATC [CPT  MORROW]:  Yes,  Ma'am.  Which  cases  are  we  --  just  the 

641  or  1030. 

MJ:  The  641  he  meant. 

CDC [MR .  COOMBS]:  641  is  what  I  meant. 

TC [MAJ  FEIN]:  Yes,  ma'am,  we  would  ask  by  noon  the  next  day  in 
order  to  - 

MJ:  That's  fine. 

TC [MAJ  FEIN]:  And,  ma'am,  I  —  we'll  have  this  marked  right 
now,  but  here's  a  today  printouts  for  the  motions  practice  purposes, 
Amazon.com,  Good  Soldiers,  and  it  actually  has  a  note  of  sources  and 
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methods  —  it  comes  up  web  page  from  Amazon.  So  we'll  have  it  marked 
versus  the  Apache  video  portion. 

MJ:  So  is  that  with  the  Apache  video  portion;  is  that  what 

you' re  talking  about? 

TC [MAJ  FEIN]:  No,  ma'am.  It's  just  actually  what  comes  up,  it 
says  a  note  on  sources  and  methods.  It's  literally  the  page  we're 
talking  about  that  we  want  judicially  noted.  This  is  what  comes  up 
on  Amazon  today. 

MJ:  Well,  why  don't  you  —  when  we  take  a  recess  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  you  all  can  get  together,  and  if  the  defense  thinks 

something  else  pulls  up,  they  can  show  you  how  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  and  vice  versa,  and  we  can  go  from  there.  So  I'm 

thinking  why  don't  we  revisit  this  on  Thursday  morning.  Does  that 
work? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  And  exchange  whatever  issues  you  can  exchange.  And  we'll  - 

-  we'll  take  a  look  at  it  there.  And  I'll  take  a  look  at  the  Lamo 
chat  in  the  meantime.  Now  is  it  the  parties'  position  that  the  only 
evidence  I  have  before  me  of  what,  if  anything,  PFC  Manning  read  is 
what's  in  the  Lamo  chats? 
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CDC [MR.  COOMBS]:  That  is  correct.  Your  Honor. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  That's  it,  right?  So  I've  got  two  left  to  decide  today, 

which  I'm  going  to  need  a  recess  on,  and  the  United  States  v.  Murphy, 
I  guess,  is  the  case  I'm  going  to  be  looking  at. 

CDC [MR .  COOMBS]:  Yes,  ma'am. 

MJ:  And  the  two  outstanding  ones  are  recalling  Special  Agent 

Shaver  and  the  additional  forensic  invest  --  investigator.  All 
right,  is  there  anything  else  we  need  to  address  at  this  point? 

ATC [CPT  OVERGAARD] :  Just  to  clarify,  ma'am,  it's  just  call  — 

recalling  Special  Agent  Shaver  to  discuss  the  emails  the  accused  sent 
members  of  the  media  and  the  WikiLeaks  Tweets  that  were  found  on  his 
personal  Mac. 

[Pause] 

MJ:  All  right.  Why  don't  we  take  a  recess  then  and  reconvene 

at  7:30  or  1930.  Is  that  acceptable  to  everybody? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Court  is  in  recess. 

[The  court-martial  recessed  at  1859,  15  July  2013.] 

[The  court-martial  was  called  to  order  at  1936,  15  July  2013.] 

MJ:  The  Court  is  called  to  order.  Let  the  record  reflect  all 
parties  present  when  the  court  recessed  are  again  present  in  court. 
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All  right,  we  have  —  before  we  get  to  the  last  two  issues 
in  the  government  rebuttal,  can  either  side  point  me  out  in  the  Lamo 
chats  exactly  where  the  Finkel  book  is  referenced? 

TC [MAJ  FEIN]:  Yes,  Ma'am.  It's  referenced  twice.  Ma'am,  it's 
first  —  it's  Page  —  it's  referenced  twice.  It's  referenced  on  Page 
27,  at  3:11:54  p.m.,  and  it's  referenced  on  Page  34,  at  the  very 
bottom,  at  2:26:10  a.m.  —  2:26:10  a.m. 

MJ:  And,  I'm  sorry,  that's  page? 

TC [MAJ  FEIN]:  That  was  Page  34,  Your  Honor. 

MJ:  And  2:26  p.m.,  you  said? 

TC [MAJ  FEIN]:  Yes,  ma'am,  2:26  --  no,  2:26  a.m.  at  the  bottom 
of  Page  34. 

MJ:  Okay.  Okay.  All  right.  Thank  you.  All  right,  I've  taken 

a  look  at  United  States  v.  Murphy,  which  as  I  read  that  case, 
basically  that's  really  relevant  to  the  second  piece  of  rebuttal 
evidence,  but  basically  when  there's  late  notice,  late  disclosure, 
late  discovery  of  the  rebuttal  evidence,  what  remedies  the  Judge  has. 
And  I've  got  everything  from  granting  a  continuance  basically  to 
excluding  the  evidence. 

With  respect  to  the  government's  intent  to  recall  Special 
Agent  Shaver  to  discuss  emails  PFC  Manning  sent  to  members  of  the 
media  as  well  as  WikiLeaks  Tweets  that  were  found  in  his  personal 
Macintosh  computer  to  rebut  evidence  offered  by  the  defense  that 
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WikiLeaks  operated  as  a  journalistic  organization  and  was  considered 
a  legitimate  journalistic  organization  at  the  time,  what's  really 
relevant  here  is  not  whether  WikiLeaks  was  a  legitimate  journalistic 
organization,  it's  whether  PFC  Manning  thought  WikiLeaks  was  a 
legitimate  journalistic  organization.  So  to  the  extent  that  those 
are  relevant  to  rebut  the  testimony  of  Professor  Benkler,  the  Court 
will  allow  it. 

Now  with  respect  to  the  second  —  the  additional  forensic 
investigator  witness  to  discuss  the  WikiLeaks  website,  I'm  not  going 
to  allow  the  government  to  do  that.  You  had  months  to  figure  this 
out.  So  —  and  we're  at  the  last  minute  here  —  the  defense, 
otherwise,  I  would  certainly  give  the  defense  a  continuance  to  be 
able  to  address  this  information.  So  at  this  point  I  think  the 
appropriate  remedy,  based  on  the  amount  of  time  the  government  had  to 
figure  this  out,  is  to  not  allow  the  evidence.  I'm  not  going  to. 
Anything  else  we  need  to  address  with  respect  to  rebuttal? 

TC [MAJ  FEIN]:  No,  ma'am. 

CDC [MR .  COOMBS]:  No,  ma'am. 

MJ:  Are  there  any  other  substantive  issues  we  need  to  address 

today?  I  understand  we  need  to  have  the  802  conference  to  talk  about 
notice  for  defense  surrebuttal  case,  how  we're  going  to  proceed.  But 
we  are  going  to  proceed  in  some  fashion  in  the  next  session  on 
Thursday  morning,  is  that  correct? 
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TC [MAJ  FEIN]:  Yes,  Ma'am. 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

MJ:  Is  that  for  purposes  of  the  public  coming  back  on  the 

record,  does  either  side  see  any  need  to  do  that? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  Ma'am,  not  until  0930  on  Thursday  morning. 

MJ:  All  right,  so  for  the  gallery  and  members  of  the  public, 

the  next  session  we  will  be  having  in  this  case  here  in  court  will  be 
at  0930  on  Thursday.  We  will  at  least  be  addressing  R.C.M.  917 
motions  and  presentation  of  the  government's  rebuttal  case,  and  the 
judicial  notice  for  the  entire  Finkel  book.  And  then  how  we  proceed 
from  there  is  what  the  parties  and  I  are  going  to  discuss  after  we 
recess  today.  Is  there  anything  else  we  need  to  address? 

CDC [MR .  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  Court  is  in  recess. 

[The  court-martial  recessed  at  1939,  15  July  2013.] 

[END  OF  PAGE] 
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[The  court-martial  was  called  to  order  at  0940,  18  July  2013.] 

MJ:  Court  is  called  to  order.  Major  Fein,  please  account  for 

the  parties. 

TC [MAJ  FEIN]:  Ma'am,  all  parties  present  when  the  Court  last 
recessed  are  again  present  with  the  following  exception:  Captain 
Overgaard  is  absent;  Captain  von  Elten  is  present.  Also,  ma'am,  as 
of  9:15  this  morning,  there  are  27  members  of  the  media  in  the  Media 
Operations  center,  one  stenographer,  no  media  in  the  courtroom,  25 
spectators  in  the  courtroom,  and  3  spectators  in  the  overflow 
trailer . 

MJ:  All  right.  Thank  you.  Would  the  parties  like  to  identify 

any  new  exhibits  that  have  been  added  to  the  record? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Ma'am,  on  17  July  2013,  the  United 
States  filed  its  brief  on  18  U.S.C.  641  —  its  targeted  brief  for  the 
R.C.M.  917  litigation.  And  that's  been  marked  as  Appellate  Exhibit 
606.  Also,  what  has  been  marked  as  Appellate  Exhibit  607  is  a 
defense  submission  of  one  internet  printout  from  Amazon.com  related 
to  the  David  Finkel  book.  And  what's  been  marked  as  Appellate 
Exhibit  608  is  an  email  from  Mr.  Coombs,  subjects  additional  case  for 
defense  filing  in  reference  to  the  R.C.M.  917  motion  for  the  18 
U.S.C.  641  offense. 

MJ:  All  right.  Thank  you.  The  Court  is  prepared  to  rule  on 

two  of  the  defense  motions  for  findings  of  not  guilty  under  R.C.M. 
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917;  that  would  be  for  the  offenses  of  the  Specification  of  Charge  I, 
which  would  be  Article  104,  and  Specification  13  of  Charge  II,  which 
would  be  fraud  and  related  activity  with  computers  in  violation  of  18 
United  States  Code,  Section  1030(a)  (1)  and  Article  134. 

[Reading  from  Appellate  Exhibit  609]  On  4  July  2013,  the 
defense  filed  four  Motions  for  Findings  of  Not  Guilty  in  accordance 
with  R.C.M  917  for  the  following  offenses  alleging  that  the 
government  has  failed  to  present  evidence  to  prove  one  or  more 
elements  of  those  offenses  Appellate  Exhibits  593  through  596) . 

(1)  Aiding  the  Enemy,  in  violation  of  Article  104,  UCMJ, 
the  Specification  of  Charge  I.  The  defense  challenges  one  element 
and  specifically  asserts  the  government  has  not  provided  evidence 
that  proves  the  accused  knowingly  gave  intelligence  information  to 
certain  persons,  namely:  al-Qaeda,  and  al-Qaeda  in  the  Arabian 
Peninsula.  The  Court's  instructions  define  "knowingly." 

"'Knowingly'  requires  actual  knowledge  by  the  accused  that  by  giving 
the  intelligence  to  the  third  party  or  intermediary  or  in  some  other 
indirect  way,  that  he  was  actually  giving  intelligence  to  the  enemy 
through  this  indirect  means.  This  offense  requires  that  the  accused 
had  a  general  evil  intent  in  that  the  accused  had  to  know  he  was 
dealing,  directly  or  indirectly,  with  an  enemy  of  the  United  States. 
'Knowingly'  means  to  act  voluntarily  and  deliberately.  A  person 
cannot  violate  Article  104  by  committing  an  act  inadvertently. 
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1  accidentally,  or  negligently  that  has  the  effect  of  aiding  the 

2  enemy. " 

3  (2)  Fraud  and  Related  Activity  with  Computers,  in  violation 

4  of  18  U.S.C.  section  1030(a) (1)  and  Article  134,  UCMJ,  Specification 

5  13  of  Charge  II.  The  defense  asserts  the  government  has  not  provided 

6  evidence  that  the  accused  exceeded  authorized  access  on  a  Secret 

7  Internet  Protocol  Router  Network  (SIPR)  computer; 

8  (3)  Stealing,  Purloining,  or  Knowingly  Converting  Records 

9  Belonging  to  the  United  States,  in  violation  of  18  U.S.C.  section  641 

10  and  Alticle  134,  UCMJ,  Specifications  4,  6,  8,  12,  and  16  of  Charge 

11  II; 

12  (4)  Particularized  motion  with  respect  to  Specification  16 

13  of  Charge  II.  On  11  July  2013,  the  government  filed  three  briefs  in 

14  opposition.  Appellate  Exhibits  599  through  601.  On  12  July  2013,  the 

15  defense  filed  a  reply  brief  to  the  government's  brief  in  response  to 

16  the  defense  Motion  for  a  Finding  of  Not  Guilty  on  the  18  U.S.C.  §641 

17  offenses.  Appellate  Exhibit  603.  On  16  July  2013,  the  defense 

18  supplemented  their  brief  on  the  18  U.S.C.  section  641  offenses  with 

19  an  email  filing.  Appellate  Exhibit  608.  On  17  July  2013,  the 

20  government  filed  a  supplemental  response  in  opposition  to  the  email 

21  filing.  Appellate  Exhibit  606.  On  15  July  2013,  the  Court  heard  oral 

22  argument  on  the  R.C.M.  917  Motions  for  the  specification  of  Charge  I, 

23  Aiding  the  Enemy,  in  violation  of  Article  104,  UCMJ,  and 
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1  Specification  13  of  Charge  II;  Fraud  and  Related  Activities  with 

2  Computers,  in  violation  of  18  U.S.C.  section  1030(a) (1)  and  Article 

3  134,  UCMJ  On  18  July  2013,  the  parties  will  present  oral  argument 

4  regarding  the  R.C.M.  917  Motions  for  Specifications  4,  6,  8,  12,  and 

5  16  of  Charge  II;  Stealing,  Purloining,  or  Knowingly  Converting 

6  Records  Belonging  to  the  United  States,  in  violation  of  18  U.S.C. 

7  section  641  and  Article  134,  UCMJ 

8  This  ruling  sets  forth  the  legal  standard  used  by  the  Court 

9  in  determining  motions  for  a  finding  of  not  guilty  under  R.C.M.  917 

10  and  findings  of  fact  and  conclusions  of  law  regarding  the  R.C.M.  917 

11  motions  for  Atlicle  104,  Aiding  the  Enemy  and  18  U.S.C.  section 

12  1030(a)(1),  Article  134. 

13  After  hearing  oral  argument  on  the  motions,  the  Court  will 

14  issue  a  supplemental  ruling  for  the  18  U.S.  C.  section  641/Article 

15  134  offenses. 

16  The  Law: 

17  1.  PFC  Manning  has  elected  trial  by  military  judge  alone, 

18  thus,  the  Court  acts  in  two  capacities.  As  the  fact-finder,  the 

19  court  must  determine  whether  the  government  has  proven  each  and  every 

20  element  of  each  offense  charged  beyond  a  reasonable  doubt.  In 

21  considering  this  Motion  for  a  finding  of  not  guilty  by  the  defense, 

22  the  Court  acts  in  its  interlocutory  capacity  and  decides  the  motion 

23  under  the  lesser  standard  required  in  R.C.M.  917. 
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2.  R.C.M.  917  Standard:  A  motion  for  a  finding  of  not 
guilty  shall  be  granted  only  in  the  absence  of  some  evidence  which, 
together  with  all  reasonable  inferences  and  applicable  presumptions, 
could  reasonably  tend  to  establish  every  essential  element  of  an 
offense  charged.  The  evidence  shall  be  viewed  in  the  light  most 
favorable  to  the  prosecution,  without  an  evaluation  of  the 
credibility  of  witnesses.  R.C.M.  917(d). 

3.  Should  the  Court  grant  a  finding  of  not  guilty  to  an 
element  of  the  greater  offense  for  an  offense  to  which  PFC  Manning 
has  pled  guilty  to  a  lesser  included  offense,  the  government  would  be 
precluded  from  proceeding  on  the  greater  offense.  R.C.M.  917(e). 

R.C.M.  917,  Article  104,  UCMJ,  Aiding  the  Enemy: 

Findings  of  Fact: 

1.  The  Court  has  examined  the  prosecution  exhibits.  Defense 
Exhibit  Juliet,  and  testimony  of  the  witnesses  set  forth  in  the 
witnesses  evidence  portion  of  the  government  brief.  Appellate  Exhibit 
600.  This  provides  some  evidence  that  between  on  or  about  1  November 
2009  and  7  May  2010  the  accused: 

(1)  Was  an  enlisted  Soldier  who  was  a  trained  all-source 
intelligence  analyst,  35  Foxtrot.  The  accused  trained  and  passed  35 
Foxtrot  Advanced  Individual  Training  (AIT) .  This  training  identified 
al-Qaeda  as  a  terrorist  group.  It  also  included  a  lesson  on 
terrorist  use  of  the  internet  and  lessons  on  information  security 
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(INFOSEC)  to  include  the  classification  process,  why  information  is 
classified,  restrictions  on  access  to  classified  information,  storage 
and  safekeeping  of  classified  information  to  include  individual 
responsibility  to  safeguard  classified  information  and  to  ensure  that 
unauthorized  persons  do  not  gain  access  to  classified  information. 

The  training  further  instructed  35  Foxtrot  Soldiers  that  the  enemy 
will  attempt  to  discover  how  and  when  the  U.S.  is  conducting 
operations.  As  such,  critical  information  (anything  that  helps  the 
enemy  obtain  an  advantage  over  the  U.S.)  including  tactics, 
techniques  and  procedures  (TTPs) ,  unit  capabilities  and  intent,  and 
personal/family  information  must  be  protected.  The  training 
completed  by  the  accused  warned  that  operational  activities  should 
not  be  discussed  on  the  internet  or  on  email,  and  Soldiers  should 
always  assume  the  adversary  is  reading  posted  material. 

(2)  Prepared  a  slide  show,  dated  13  June  2008,  entitled 
"Operations  Security  (OPSEC) "  that  defined  critical  information, 
identified  adversaries,  listed  common  OPSEC  leaks,  and  concluded  with 
the  need  to  avoid  public  disclosure  of  critical  information  to 
include  posting  information  on  the  internet. 

(3)  Signed  two  non-disclosure  agreements,  dated  7  April 
2008  and  17  September  2008,  respectively,  where  he  acknowledged  that 
he  received  and  understood  a  security  indoctrination  concerning  the 
nature  and  protection  of  classified  information  including  the 
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procedures  to  be  followed  in  ascertaining  whether  persons  to  whom  the 
accused  contemplates  disclosing  classified  information  have  been 
approved  for  access  to  it  and  that  the  accused  has  been  advised  that 
the  unauthorized  disclosure  of  classified  information  could  cause 
damage  or  irreparable  injury  to  the  U.S.  or  could  be  used  to  the 
advantage  of  a  foreign  nation. 

(4)  Maintained  a  variety  of  intelligence  publications  on 
his  external  hard  drive.  Portions  of  the  publications  address  use  of 
the  internet  by  terrorist  organizations  and  opposing  forces. 

(5)  Deployed  to  Forward  Operating  Base  (FOB)  Hammer,  Iraq 
on  or  about  October  2009  and  remained  deployed  there  past  May  2010. 

He  had  access  to  the  classified  information  on  the  Secret  Internet 
Protocol  Router  (SIPR)  network  on  the  defense  Common  Ground  System- 
Army  (DCGS-A)  computers  in  the  2nd  Brigade  SCIF.  The  accused  was 
working  as  an  all-source  intelligence  analyst,  using  the  SIGACTS  on 
the  CIDNE-I  database  to  develop  intelligence  products  that  involved 
pattern  analysis.  The  accused  downloaded,  indexed,  and  plotted 
CIDNE-I  SIGACTS  on  maps  based  on  locations  and  enemy  threats.  The 
accused  was  aware  that  the  enemy  also  engaged  in  similar  pattern 
analysis  about  U.S.  TTPs  and  movements.  The  accused  sent  to 
WikiLeaks  the  same  CIDNE-I  database  and  SIGACTs  he  used  to  develop 
pattern  analysis  with  the  intent  that  it  be  disclosed  to  the  public. 

(6)  Accessed  the  ACIC  report  published  on  18  March  2008 
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entitled  "WikiLeaks.org  -  An  Online  Reference  to  Foreign  Intelligence 
Services,  Insurgents,  or  Terrorist  Groups?"  on  1  December  2009,  29 
December  2009,  1  March  2010  and  7  March  2010.  The  ACIC  report  was  a 
counterintelligence  analysis  report  analyzing  the  threat  posed  by 
WikiLeaks.org  following  the  release  of  2000  pages  of  U.S.  Army  Tables 
of  Equipment  in  Iraq  and  Afghanistan  from  April  2007  and  release  of 
other  classified  U.S.  information.  The  report  listed  as  an 
intelligence  gap  "Will  the  WikiLeaks.org  Web  site  be  used  by  FISS, 
foreign  military  services,  foreign  insurgents,  or  terrorist  groups  to 
collect  sensitive  or  classified  U.S.  Army  information  posted  to  the 
WikiLeaks.org  Web  site?".  The  report  also  listed  a  conclusion  that 
"It  must  be  presumed  that  foreign  adversaries  will  review  and  assess 
any  DoD  sensitive  or  classified  information  posted  to  the 
WikiLeaks.org  website.  Websites  similar  to  WikiLeaks.org  will 
continue  to  proliferate  and  will  continue  to  represent  a  potential 
force  protection,  counterintelligence,  OPSEC,  and  INFOSEC  threat  to 
the  U.S.  Army  for  the  foreseeable  future."  The  accused  sent  the  ACIC 
report  to  WikiLeaks  between  on  or  about  15  February  2010  and  15  March 
2010  with  the  intent  that  it  be  disclosed  to  the  public. 

(7)  On  14  February  2010  searched  for  IRR  5  391  0014  08, 
dated  23  March  2008,  entitled  "Internet  Web  Postings  of  Classified 
and  for  Official  Use  Only  Documents".  The  IRR  discussed  WikiLeaks  as 
a  publicly  accessible  Internet  website  where  leaked  information. 
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1  including  classified  information,  can  be  published  to  the  public 

2  anonymously.  The  report  described  the  threat  to  the  Marine  Corps  of 

3  publication  of  Marine  Corps  sensitive  or  classified  information. 

4  On  15  February  2010,  the  accused  moved  the  IRR  to  his  personal 

5  computer. 

6  (8)  On  14  February  2010,  searched  for  a  report  dated  7 

7  January  2010  entitled  "MARFOREUR  TRIP  REPORT  (MTR)  discussing  Marine 

8  Corps  monitoring  of  Chaos  Communication  Congress  26C3  Here  Be  Dragons 

9  Conference  held  26  to  30  December  2009."  The  report  discussed  the 

10  conference  discussion  on  WikiLeaks  as  a  publicly  accessible  Internet 

11  website  where  leaked  information,  including  classified  information, 

12  can  be  published  to  the  public  anonymously.  On  15  February  2010,  the 

13  accused  moved  the  MTR  to  his  personal  computer. 

14  (9)  Made  statements  in  his  5  through  18  March  2010,  chats 

15  with  Press  Association,  Julian  Assange,  indicating  his  understanding 

16  that  WikiLeaks  was  "like  an  intelligence  agency  minus  the  anonymous 

17  sources"  and  that  WikiLeaks  was  seeking  to  publish  Government 

18  controlled  information  sent  to  them  by  the  accused  and  other  donors. 

19  (10)  Made  statements  in  his  May  2010,  chats  with  Adrian 

20  Lamo  admitting  that  he  gave  WikiLeaks  the  following  classified 

21  information  from  the  SIPRNET:  a  database  of  half  a  million  events 

22  during  the  Iraq  war,  from  2004  to  2009,  with  reports,  date  time 

23  groups,  lat-lon  locations,  casualty  figures,  260,000  Department  of 
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State  cables  from  embassies  and  consulates  all  over  the  world, 
classified  cable  from  U.S.  embassy  Reykyavik  on  Icesave,  dated  13 
January  2010,  the  Gharani  Airstrike  video  from  CENTCOM.smil.mil;  the 
Apache  video,  and  the  JTF-GTMO  papers.  The  accused  also  made 
statements  that  the  260,000  classified  cables  from  the  Net-Centric 
Diplomacy  database  that  he  sent  to  WikiLeaks  would  be  released  to  the 
public  in  searchable  format. 

Conclusion  of  Law: 

The  accused's  training  and  experience  as  an  all-source 
intelligence  analyst,  his  preparation  of  intelligence  products  while 
deployed  in  Iraq,  a  combat  zone,  using  the  CIDNE-I  database  while 
contemporaneously  sending  the  entire  database  to  WikiLeaks  for  public 
disclosure  and  worldwide  publication,  the  volume  of  classified 
information  from  the  Department  of  Defense  and  the  Department  of 
State  that  the  accused  admitted  to  disclosing  to  WikiLeaks,  and  the 
accused's  search  for  and  downloading  of  counterintelligence  documents 
reporting  the  threat  posed  by  WikiLeaks,  considered  together,  provide 
some  evidence  from  which,  together  with  all  reasonable  inferences  and 
applicable  assumptions,  viewed  in  the  light  most  favorable  to  the 
prosecution,  without  an  evaluation  of  the  credibility  of  witnesses, 
could  reasonably  tend  to  establish  that  the  accused  actually  knew  he 
was  dealing  with  the  enemy  and  actually  knew  that  by  sending  such 
information  to  WikiLeaks  with  the  intent  that  it  be  broadcast  to  the 
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public,  he  was  knowingly  providing  intelligence  to  the  enemy.  The 
"intelligence  gap"  evidence  in  the  ACIC  report  as  well  as  laudable 
motive  evidence  by  the  accused  goes  to  the  weight  of  the  evidence,  a 
decision  properly  determined  by  the  fact-finder. 

R.C.M.  917,  18  United  States  Code,  section  1030(a)(1), 

Fraud  and  Related  Activity  with  Computers. 

Findings  of  Fact : 

1.  The  government's  theory  for  Specification  13  of  Charge 
II  is  that  the  accused  "exceeded  authorized  access"  by  accessing  and 
downloading  classified  information  using  Wget,  an  unauthorized 
software,  on  Army  computers  and  on  the  DCGS-A  computers. 

2.  18  United  States  Code,  section  1030(e) (6),  defines  the 
phrase  "exceeds  authorized  access"  as  "to  access  a  computer  with 
authorization  and  to  use  such  access  to  obtain  or  alter  information 
in  the  computer  that  the  accuser  is  not  entitled  to  so  obtain  or 
alter."  There  is  a  split  in  the  federal  circuits  regarding  whether 
this  definition  is  an  access  only  restriction  or  whether  a 
restriction  on  use  of  the  information  accessed  can  violate  the 
statute  as  well.  See  generally  Federal  Computer  Fraud  and  Abuse  Act: 
Employee  Hacking  Legal  in  California  and  Virginia,  but  Illegal  in 
Miami,  Dallas,  Chicago,  and  Boston,  87-JAN  Florida  B.J.  36,  January 
2013. 

3.  This  Court  has  issued  two  previous  rulings,  dated  8 
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1  June  2012,  Appellate  Exhibit  139,  and  18  July  2012,  Appellate  Exhibit 

2  218,  in  response  to  defense  motions  to  dismiss  Specifications  13  and 

3  14  of  Charge  II.  In  those  rulings,  the  Court  found  ambiguity  in  the 

4  statute,  applied  the  rule  of  lenity,  and  ruled  that  the  Court  would 

5  instruct  in  accordance  with  the  narrow  interpretation  that  "exceeds 

6  authorized  access"  is  limited  to  violations  of  restrictions  on  access 

7  to  information  and  not  restrictions  on  the  use  of  information.  The 

8  Court  specifically  ruled  "Restrictions  on  access  to  classified 

9  information  are  not  limited  to  code  based  or  technical  restrictions 

10  on  access.  Restrictions  on  access  to  classified  information  can  come 

11  from  a  variety  of  sources,  to  include  regulations,  user  agreements, 

12  and  command  policies.  Restrictions  on  access  can  include  manner  of 

13  access.  User  agreements  can  also  contain  restrictions  on  access  as 

14  well  as  restrictions  on  use.  The  two  are  not  mutually  exclusive. 

15  The  Court  does  not  find  this  issue  capable  of  resolution  prior  to  the 

16  presentation  of  evidence.  These  issues  are  properly  decided  after 

17  the  formal  presentation  of  the  evidence  as  a  motion  for  a  finding  of 

18  not  guilty  or  a  motion  for  finding  that  the  evidence  is  not  legally 

19  sufficient." 

20  4.  The  accused  pled  guilty  to  the  lesser  included  offenses 

21  of  Specifications  13  and  14  of  Charge  II.  The  government  advised  the 

22  Court  it  is  not  going  forward  with  the  greater  offense  for 

23  Specification  14  of  Charge  II. 
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1  5.  In  line  with  the  Court's  18  July  2012  order,  the 

2  defense  challenges  the  government  theory  on  legal  grounds  and  moves 

3  for  a  finding  of  not  guilty.  Specifically,  the  defense  argues  that 

4  there  were  no  restrictions  on  the  accused's  access  to  the  Department 

5  of  State  Net-Centric  Diplomacy  database  or  his  ability  to  download 

6  the  records  in  the  NCD  imposed  by  either  DoS  or  DoD.  The  accused 

7  would  have  the  same  access  to  the  NCD  whether  he  used  Wget  to 

8  download  the  files  rapidly  or  whether  he  downloaded  them  slowly  by 

9  click  and  save.  Thus,  the  defense  argues,  even  if  Wget  is  an 

10  unauthorized  program,  it  is  not  an  access  restriction  for  purposes  of 

11  18  United  States  Code,  section  1030(a) (1). 

12  6.  The  defense  cites  Wentworth-Douglass  Hospital  and  Young 

13  &  Navis  Professional  Association,  2012  West  Law  2522963,  District 

14  Court  of  New  Hampshire  (D.N.H.),  a  civil  case  under  18  United  States 

15  Code,  1030(a) (2) (C) ,  where  the  defendants  violated  a  hospital 

16  computer  use  policy  by  connecting  large  removable  storage  devices  to 

17  download  information.  The  court  held  that  this  was  a  use  restriction 

18  not  an  access  restriction  ("Of  course,  the  distinction  between  an 

19  employer-imposed  'use  restriction'  and  an  'access  restriction'  may 

20  sometimes  be  difficult  to  discern,  since  both  emanate  from  policy 

21  decisions  made  by  the  employer,  decisions  about  who  should  have  what 

22  degree  of  access  to  the  employer's  computer  and  stored  data  and,  once 

23  given  such  access,  the  varying  uses  to  which  each  employee  may 
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legitimately  put  those  computers  and  the  data  stored  on  them.  But, 
simply  denominating  limitations  as  'access  restrictions'  does  not 
convert  what  is  otherwise  a  use  policy  to  an  access  restriction. 

Here,  the  hospital's  policy  prohibiting  employees  from  accessing 
company  data  for  the  purpose  of  copying  it  to  an  external  storage 
device  is  not  an  'access'  restriction;  it  is  a  limitation  on  the  use 
to  which  an  employee  may  put  data  that  he  or  she  is  otherwise 
authorized  to  access.  An  employee  who  is  given  access  to  hospital 
data  need  not  'hack'  the  hospital's  computers  or  circumvent 
technological  access  barriers  in  order  to  impermissibly  copy  that 
data  onto  an  external  storage  device.  The  offending  conduct  in  this 
case  is  misuse  of  data  the  employee  was  authorized  to  access,  not  an 
unauthorized  access  of  protected  computers  and  data.") 

7.  The  government  has  presented  testimony  by  Special  Agent 
David  Shaver,  Mr.  Jason  Milliman,  Captain  Thomas  Cherepko,  and  Mr. 
Mark  Kitz  that  Wget  is  not  authorized  software  for  a  DCGS-A  computer 
and,  even  if  it  was,  Wget,  as  executable  software,  was  required  to  be 
installed  by  Mr.  Milliman  on  the  DCGS-A  computers.  The  government 
has  also  presented  evidence  that  the  accused  downloaded  Wget  to  his 
user  profile  on  the  DCGS-A  computer  he  used  in  the  SCIF. 

8.  The  defense  has  elicited  testimony  from  Mr.  Weaver  and 
Colonel  Miller  that  Wget  was  no  different  than  executable  software 
such  as  games,  and,  even  if  technically  prohibited,  these 
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prohibitions  were  not  enforced  by  the  chain  of  command. 

Conclusions  of  Law: 

1.  The  Court  adheres  to  its  rulings  on  interpreting 
"exceeding  authorized  access"  in  Appellate  Exhibit  139  and 
218. 

2.  Unlike  Wentworth-Douglass  Hospital,  this  case  involves 
classified  information  belonging  to  the  U.S.  government.  The  accused 
is  charged  under  18  United  States  Code,  section  1030(a) (1).  Although 
the  definition  for  "exceeds  authorized  access"  is  the  same  for  all 
sections  of  18  United  States  Code,  1030,  access  restrictions  on 
classified  information  can  be  more  stringent  than  for  other 
information  and  can  include  manner  of  access  restrictions  designed  to 
ensure  the  security  and  protection  of  the  classified  information  and 
to  prevent  the  classified  information  from  exposure  to  viruses, 

Trojan  horses  or  other  malware. 

3.  Evidence  that  the  accused  used  unauthorized  software, 
Wget ,  to  access  and  download  the  classified  records  charged  in 
Specification  13  of  Charge  II  provides  some  evidence  from  which, 
together  with  all  reasonable  inferences  and  applicable  assumptions, 
viewed  in  the  light  most  favorable  to  the  prosecution,  without  an 
evaluation  of  the  credibility  of  witnesses,  could  reasonably  tend  to 
establish  that  the  accused  "exceeded  authorized  access"  on  a  SIPR 
computer.  The  countervailing  evidence  presented  by  the  defense  goes 
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to  the  weight  of  the  evidence,  a  decision  properly  determined  by  the 
fact-finder . 

Ruling:  The  defense  motions  for  a  finding  of  not  guilty 

for  the  Specification  of  Charge  I  and  Specification  13  of  Charge  II 
are  denied.  The  Court  will  issue  a  supplemental  ruling  regarding  the 
defense  motions  for  a  finding  of  not  guilty  for  Specifications  4,  6, 
8,  12,  and  16  of  Charge  II  in  due  course.  So  ordered  this  18th  day 
of  July,  2013. 

Have  this  marked  as  the  next  appellate  exhibit  in  line. 

[The  court  reporter  marked  the  document  Appellate  Exhibit  609.] 

MJ:  All  right.  We  have  some  issues  with  respect  to  judicial 

notice.  Government? 

TC [MAJ  FEIN]:  Yes,  Ma'am.  In  our  last  session  the  United 
States  moved  as  part  of  --  or  moved  for  the  Court  to  take  judicial 
notice  of  the  entire  David  Finkel  book  under  the  pro  —  or  under  a 
theory  that,  if  the  defense  is  going  to  argue  that  PFC  Manning  read 
any  portion  of  the  book,  that  the  entire  book  should  be  judicially 
noticed,  and,  thus,  the  prosecution  would  move  to  attend  it.  So  the 
United  States  has  marked  as  Prosecution  Exhibit  186  for 
identification  the  entire  David  Finkel  book. 

MJ:  And  how  do  you  intend  to  capture  this  for  the  record  of 

trial,  if  I  admit  it? 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  intends  that  if  that 
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1  book  is  admitted,  that  the  spine  will  be  broken  and  it'll  be  put  into 

2  a  normal  8  and  one-half  X  11  pages  —  or  8  and  one  half  X  11  size 

3  pages  and  put  into  the  record. 

4  MJ:  All  right.  Defense? 

5  CDC [MR .  COOMBS]:  Yes,  Your  Honor.  The  Court  has  taken 

6  judicial  notice  of  the  existence  of  the  book.  The  defense's  position 

7  on  this  is  that  the  government  now,  by  asking  the  Court  to  put  the 

8  entire  book  in  the  record,  there  would  be  a  104 (b)  determination  that 

9  the  Court  would  have  to  make.  And  that  would  be,  first,  on 

10  relevance;  is  there  evidence  to  show  that  PFC  Manning  read  the  book. 

11  The  defense's  position  on  this  is  that  the  book  came  out  in  September 

12  of  2009;  PFC  Manning  deployed  a  month  later  than  that;  and  when  you 

13  look  at  the  PE  30,  the  Lamo  chats,  it's  clear  that  PFC  Manning  is 

14  referencing  the  Washington  Post  and  David  Finkel.  And  the  defense's 

15  position  is  that  he  learned  of  the  excerpts  from  the  video  and 

16  Finkel ' s  book  from  the  internet,  not  from  David  Finkel 's  actual  book. 

17  For  that,  we've  asked  the  Court  to  take  judicial  notice  of  Defense 

18  Exhibit  —  I  believe  it's  Hotel  Hotel,  which  is  an  excerpt  —  or 

19  which  —  excuse  me,  which  is  Washington  Post  article,  dated  15 

20  September  2009.  And  in  that  article  it  quotes  an  excerpt  from  the 

21  video  verbatim.  And  so  the  defense's  position  is  that  is  where  PFC 

22  Manning  would  have  learned  of  the  video's  content  being  quoted  by  Mr. 

23  Finkel,  as  opposed  to  the  actual  book.  And  so  we'd  request  the  Court 


10460 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


9 


to  take  judicial  notice  of  Defense  Exhibit  Hotel  Hotel.  And  with 
regards  to  the  actual  book,  even  though  the  Court  has  taken  judicial 
notice  of  the  book,  the  government  should  —  if  there's  a  particular 
excerpt  or  whatnot  from  that  book,  they  should  be  —  be  forced  to 
indicate  what  excerpt  they  want  instead  of  the  entire  book.  And  then 
we  can  litigate  the  relevance  of  that. 

MJ:  All  right.  I  notice  Mr.  Finkel  is  not  on  either  side's 

witness  list. 

CDC [MR .  COOMBS]:  No,  Your  Honor. 

TC [MAJ  FEIN]:  No,  Ma'am.  Or  that  is  correct,  ma'am. 

MJ:  All  right.  I've  already  taken  judicial  notice  of  the  book. 

What  I'm  going  do  is  —  I'll  take  judicial  notice  of  the  entire  book. 
And  I  will  also  take  judicial  notice  of  the  Washington  Post  article. 
You  can  make  any  arguments  that  you  wish  to  make  with  respect  to 
whether  the  inferences  are  that  he  read  the  book,  he  didn't  read  the 
book,  he  read  the  article,  he  didn't  read  the  article,  and  present 
that  to  the  fact-finder. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  So  Defense  Exhibit  —  Prosecution  Exhibit  186  for 

identification  is  admitted,  as  is  Defense  Exhibit  Hotel  Hotel.  Is 
there  anything  else  we  need  to  address  before  we  proceed  to  the 
arguments  with  respect  to  the  641  --  the  18  United  States  Code, 
Section  641  offenses? 
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TC [MAJ  FEIN]:  No,  Ma'am. 

CDC [MR.  COOMBS]:  No,  Your  Honor.  If  we  could  though  take  just  a 
ten  minute  break  before  we  go  into  argument. 

MJ:  All  right.  Why  don't  we  make  that  15  minutes.  Court  will 

—  is  in  recess  until  20  minutes  after  10. 

[The  court-martial  recessed  at  1006,  18  July  2013.] 

[The  court-martial  was  called  to  order  at  1025,  18  July  2013.] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  Court  last  recessed  are  again  present  in 
court.  Mr.  Coombs,  are  you  ready  to  proceed? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  And,  Your  Honor,  what  I'd 

like  to  do  is  address  the  GALs  separately.  So  handle  the  other  641 
specifications,  let  the  government  respond  to  that,  and  then 
separately  argue. 

MJ:  That's  fine. 

CDC [MR .  COOMBS]:  Well,  Your  Honor,  the  defense's  position  on 

this  is  that  the  government  has  never  charged  the  correct  property  in 
this  case.  They've  charged  the  databases.  And  what  they  charged  for 
each  of  the  specifications  was  a  database,  and  then  they  did  the 
qualifier  of  explaining  what  the  database  contained,  but  they  charged 
the  database. 

MJ:  Let  me  ask  you  a  question,  Mr.  Coombs,  just  right  off  the 

bat.  What's  your  definition  of  a  "database"? 
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CDC [MR.  COOMBS]:  Well,  in  that  instance  there  —  I  know  the 

government  went  to  Black  Letter  Law  or  — 

MJ:  Black's  Law  Dictionary? 

CDC [MR.  COOMBS]:  Black's  Law  Dictionary,  excuse  me.  Or  just 

common  understanding  perhaps  of  what  you  might  interpret  a  database 
to  mean.  But  the  important  thing  here  is  when  they  charge  database  on 
the  Charge  Sheet,  the  database  has  a  meaning.  And  in  that  case  the 

meaning  is  the  database.  And  in  this  instance  - 

MJ:  Well,  it  says  the  database  containing  records. 

CDC [MR.  COOMBS]:  Right.  And  that  was  a  description  of  what 

the  database  was.  When  you  take  a  look  at  —  and  the  reason  why 
that's  an  important  thing  to  —  to  look  at.  Your  Honor,  when  you  see 
the  word  "database",  and  you  see  what  they've  charged  it  in  this 
case;  the  CIDNE-I  database,  the  CIDNE-A  database,  the  SOUTHCOM 
database,  those  are  particular  things.  Those  are  items  —  databases. 
And  the  description  containing  the  certain  amount  of  records  that  was 
description  of  what  they  were  charged  in  the  database,  much  like  you 
would  charge  a  particular  --  like  if  a  car  was  stolen;  you're 
charging  theft  of  the  car,  you  know,  containing  CDs  or  containing 
other  items,  but  it's  clear  what  you're  charging  is  the  car.  And 
when  we  filed  our  Bill  of  Particulars  and  —  when  you  look  at  what 
the  government  wants  to  do  --  and  I'll  get  to  their  kind  of  logic  in 
a  moment,  but  the  defense  filed  a  Bill  of  Particulars.  And  that  is 
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when  you  would  find  out  exactly  what  they're  charging  and  under  what 
theory.  And  in  that  that  response  they  said,  it  is  clear  the 
property  at  issue,  namely  the  specific  identified  databases.  That 
was  the  government's  response;  the  specific  identified  databases. 

And  the  Court  held  —  when  you  looked  at  the  Bill  of  Particulars,  the 
Court  concluded  that  the  government's  response  to  the  defense's 
request  for  the  Bill  of  Particulars  was  sufficient  to  satisfy  the 
purpose  of  the  Bill  of  Particulars.  And  it's  clear  from  then  their 
response  that  what  they  were  alleging  that  he  stole  was  the  specific 
identified  databases.  And  so  when  you  ask  me,  how  do  I  interpret 
databases,  I  interpret  it  based  upon  the  government's  Bill  of 
Particulars  response,  and  that  is  the  specific  identified  databases. 

MJ:  How  do  you  have  a  database  without  records? 

CDC [MR .  COOMBS]:  Easy.  I  mean,  I  can  create  a  database  —  so 

—  taking  it  out  from  this  case  I  can  create  a  database  that  has 
nothing  in  it  yet.  And  a  database  is  just  simply  like  Westlaw  — 

West law' s  a  database.  You  can  have  a  Westlaw  database  that  doesn't 
have  any  records  yet.  It's  no  less  a  database.  And  in  this  instance 
the  government,  as  we  know  from  their  instructions,  they  —  they 
wanted  to  charge,  and  they  did  charge,  and  they  wanted  to  prove,  and 
did  try  to  prove,  the  value  of  the  database.  So  when  you  look  at  the 
proposed  instruction  by  the  government  —  and  let's  use 
Specification  4  of  Charge  II,  the  government  says  in  that 
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specification  that  the  elements  that  this  Court  should  have 
instructed  on  that  —  is  that  in  this  case  the  CIDNE-I  database 
belonged  to  United  States  government.  That  the  CIDNE-I  database  was 
a  value  of  more  than  a  thousand.  And  then  for  the  lesser  included 
offense,  they  said  the  offense  of  stealing  or  converting  the  CIDNE-I 
database,  of  a  value  less  than  a  thousand,  is  a  lesser  included 
offense  of  the  offenses  within  Specification  4.  And  they  did  this 
for  all  the  databases.  And  so  it's  clear  that  the  databases  what  the 
government  was  proving  —  and  we  know  that  because  then  we  take  a 
look  at  the  evidence  that  they  offered  in  the  case.  And  they  offered 
evidence  of  how  much  does  it  cost  for  a  server  —  a  virtual  server, 
how  you  create  the  database.  And  we  had  testimony  from  Chief  Nixon 
about  the  fact  that  —  and  this  is  with  regards  to  the  GAL,  but  it's 
equally  applicable  here  that  you  can  have  the  database  without  the 
information,  but  you  can't  have  the  information  as  far  as  how  it  was 
set  up  in  the  GAL  without  the  database.  Well,  in  this  case  here, 
when  you're  charging  the  database  —  and  that's  what  the  government 
has  charged,  it's  clear  that  that  could  be  what  they  were  intending 
to  prove.  And,  in  fact,  that  is  what  they  charged  and  attempted  to 
prove.  But  in  the  government's  response,  which  is  very  difficult  to 
discern,  they  wanted  to  make  it  seem  as  if  it's  clear  to  everybody 
involved  that,  when  they  said  database,  that  that  actually  applies  to 
what  PFC  Manning  allegedly  did,  in  fact,  take.  And  if  that  were 
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abundantly  clear,  then  you  wouldn't  need  31  pages  of  motion  from  the 
government  to  explain  that.  And  you  wouldn't  need  25  pages  from  the 
defense  to  say  we  don't  understand  what  they're  alleging.  But  it 
seems  like  what  the  —  the  government  is  trying  to  say  is  that  the 
word  database  encapsulates  everything  under  the  sun.  They  want  to 
say,  you  know  what,  when  we  say  "database",  what  we  really  mean  was 
the  records  in  the  database.  And  when  we  say  records,  what  we  really 
mean  was  the  copy  of  the  records.  And  when  we  say  copy  of  records, 
what  we  really  mean  was  the  information  within  the  copy  of  records. 
And  when  we  say  information,  what  we  really  mean  was  the  exclusive 
possession  of  that  information.  That  is  the  extent  to  which  the 
government  wants  to  extrapolate  from  the  word  "database".  Well,  the 
problem  with  that  is  words  matter.  And  the  government  on  more  than 
one  time  has  used  that  refrain,  words  matter.  When  we  were  asking 
for  documents  from  Quantico,  and  we  thought  documents  fairly 
encapsulated  emails,  the  government  said  no,  no,  no,  words  matter. 

If  you  wanted  emails,  you  should  have  asked  for  emails.  When  we  said 
we  wanted  investigative  papers  and  damage  assessments  during 
discovery,  the  government  came  back  and  said,  oh,  no,  words  matter. 
What  you  really  should  have  asked  for  was  working  papers.  When  we 
say  that  we  wanted  a  damage  assessment,  what  they  really  said  was, 
oh,  you  should  have  asked  for  draft  or  interim.  That's  —  that's 
words  matter.  Well,  words  do  matter.  And  they  matter  the  most  when 
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it's  on  a  charge  sheet.  That's  when  words  matter.  And  the 
government  chose  to  charge  this  way.  And  this  Court  has  previously 
held  the  government's  feet  to  the  fire  on  how  they  charge.  When  you 
take  a  look  at  Appellate  Exhibit  515,  when  it  was  dealing  with  793 
offenses,  and  the  government  was  trying  to  argue  that,  hey,  we  can 
take  advantage  of  the  information  clause  and  we  don't  have  to  prove 
reason  to  believe. 

MJ:  You  mean  the  documents  clause? 

CDC [MR .  COOMBS]:  Documents  clause.  Thank  you,  yes.  We  don't 

have  to  prove  reason  to  believe.  And  this  Court  said,  you  know  what, 
you  had  an  option.  You  could  have  charged  under  the  documents  clause 
or  you  could  have  charged  under  the  information  clause.  And  you 
chose  the  way  you  charged,  and  now  you  need  to  own  the  way  you 
charged  it.  This  case  is  no  different.  And  when  you  look  at  that 
actually  —  documents  information.  Even  in  the  793  offense,  there  is 
a  distinguishment  between  documents  and  information.  And  in  this 
case  the  government  has  had  over  a  year  to  draft  these  offenses 
after  the  initial  drafting  when  they  re-preferred  the  charges.  They 
definitely  thought  through  how  they  wanted  to  draft  it.  But 
unfortunately  what  they  didn't  do  is  read  641  cases.  Because  if 
they  read  641  cases,  they  would  see  that  there  is  a  difference 
between  a  record,  a  copy  of  the  record,  and  information  contained  in 
the  record. 
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MJ:  That's  what  I  would  like  you  to  focus  on,  Mr.  Coombs, 

because  as  I'm  looking  at  the  Charge  Sheet  it  says  that  "did  steal"  - 
-  in  that  Private  First  Class  Bradley  E.  Manning  did  at  or  near 
whatever,  steal,  purloin  or  knowingly  convert  to  his  use,  or  use  of 
another,  a  record  or  a  thing  of  value  of  the  United  States  or  a 
department  of  the  agency  thereof  --  Specification  4  --  and  they're 
all  structured  the  same  way;  The  Combined  Information  Network 
Exchange- Iraq  database  containing  more  than  380,000  records.  Now  I'm 
not  going  to  interrupt  your  argument,  but  I'm  going  to  ask  you  two 
things.  Argue  assuming  that  I  rule  completely  in  your  favor  with 
respect  to  that  this  doesn't  encompass  records.  Then  I  would  like  an 
Alternate  B  argument,  assuming  that  I  find  that  it  does,  what  is  the 
defense  position  with  respect  to  information  and  value? 

CDC [MR.  COOMBS]:  Okay.  So  the  first  one  is  easy;  if  it 

encompasses  database.  So  when  you  look  at  database,  the  641  cases  are 
all  the  same  when  you  --  when  you  see  how  they  charged  the  items.  If 
it's  information,  like  the  DiGilio  case,  Hubbard,  Jeter,  Jordan  case, 
they  all  do  the  copy  —  they  charge  the  copy  and  then  they  charged 
the  information  separately.  So  the  —  even  though  the  federal 
jurisdiction  has  more  of  —  with  indictment  gives  a  lot  more 
information,  the  actual  charge  that  they  charge  though,  which  is  very 
similar  to  us,  that  follows  and  tracks  641  exactly,  when  they  are 
charging  a  copy,  they  charge  a  copy.  When  they  charge  information. 
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they  charge  information. 

[The  Civilian  Defense  Counsel  displayed  Appellate  Exhibit  610  on  the 
projection  screen  in  full  view  of  all  court-martial  participants.] 

So  to  answer  the  Court's  question,  if  you  determine  that 
they  charge  database,  and  when  they  said  database  in  this  case,  it's 
important  to  look  at  the  actual  specification  then.  When  they  say 
that  —  to  wit  the  Combined  Information  Data  Network  Exchange-Iraq 
database  containing  more  than  300,000  —  380,000  records,  what 
they're  talking  about  is  the  database,  and  they  do  a  description  of 
the  database.  And  the  way  you  would  prove  that  under  641  is  cost  of 
production,  the  equipment  and  maintenance  of  the  database.  So  if 
someone  actually  stole  the  database,  that's  how  you  would  prove  it. 

So  in  the  defense's  position,  if  the  Court  determines  to 
hold  the  feet  of  the  government  to  its  burden  of  what  it  proved  or 
what  it  alleged,  I  should  say,  then  in  this  instance  the  917  should 
be  granted  because  it's  clear  the  evidence  came  out  that  the  database 
was  not  taken.  Everyone  realized  that  besides  the  government  in  how 
they  charged  it.  Now,  if  the  Court  says,  you  know  what,  when  they 
said  "database",  and  they  used  the  description  of  containing  more 
than  380,000  records,  then  that  encapsulates  records.  So  you're  on 
notice  of  both  database  and  records.  If  the  Court  says  that,  then, 
again,  in  this  instance,  a  917  should  be  granted.  The  reason  why  is, 
we  again  had  evidence  the  records  were  never  taken  from  the 
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government.  The  database  and  the  records  always  remained  with  the 
government.  We  had  multiple  witnesses  say  that  at  no  time  could  they 
not  access  CIDNE-I,  CIDNE-A,  of  the  SOUTHCOM;  that  those  records 
always  were  maintained.  They  were  never  taken  from  the  government's 
possession.  And  so  now  what  you  have  is  you  have  perhaps  copies  of 
records  and  information;  so  the  last  two  things.  And  so  just  looking 
at  it  from  the  —  in  the  abstract  of  how  you  prove  these  things,  all 
the  cases  for  641  cases  for  records,  it's  cost  of  production  of  the 
original.  So  that  is  the  people  who  are  working  on  it,  typing  into 
it,  how  long  it  took  to  create  the  record.  So  that's  the  - 

MJ:  And  what  cases  are  you  relying  on  for  that  one? 

CDC [MR .  COOMBS]:  The  —  well,  all  the  641  cases;  the  DiGilio, 
the  Hubbard,  Jeter,  Jordan,  and  Morison  cases  —  that  line  of  cases, 
as  well  as  Collins.  Those  641  cases,  when  you  read  them,  what  you 
see  is  how  —  what  the  government  charged  and  then  how  you  proved  it. 
And  so,  for  example,  the  --  I  believe  it  is  --  I  think  it's  the 
Jordan  case,  but  I'm  not  for  sure  —  there's  an  original  so  they 
valued  the  cost  of  production  of  the  original.  With  regards  to 
copies  of  the  records  the  —  mainly  all  these  cases  that  I  just  cited 
for  you,  then  it's  the  cost  of  production  of  the  copy.  So  the  use  of 
the  —  the  printer  in  the  particular  government  office  —  the  paper 
that  was  used  to  copy  it,  the  time  that  was  used  to  copy  it.  So  the 
cost  of  production  is  how  you  prove  a  copy  of  the  records  because 
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that  is  what  you  are  valuing.  You're  valuing  the  copy  of  the  record, 
and  so  what  —  how  you  do  that,  the  cost  of  production  of  it.  That  - 

MJ:  Let  me  ask  --  let  me  ask  you  a  question.  On  those  copy 

cases,  did  —  each  of  those  copy  cases,  did  the  accused  or  the 
defendant  actually  go  back  to  the  original  records  and  make  a  copy, 
or  did  the  person  take  the  copy  or  steal  a  copy  that  was  already 
made? 

CDC [MR .  COOMBS]:  The  Jordan  —  actually,  the  DiGilio  is  a 

photocopy  of  the  originals.  So  they  took  a  photocopy  of  the 
originals.  The  Hubbard  case  is  the  same  way;  it's  copies  of  the 
originals.  The  Jeter  case  is  carbon  paper.  So  they  took  the  carbon 
paper,  which  arguably  is  the  copy  of  the  original,  and  then  they 
returned  the  carbon  paper.  So  —  but  when  you  look  at  all  those 
lines  of  cases  the  —  in  the  allegation  they  actually  charge  what  was 
alleged  to  be  taken;  the  copy.  And  then  they  value  that.  And  in 
those  cases  in  which  they  charge  information,  in  addition  to  that, 
they,  in  fact,  value  the  information. 

MJ:  What  would  be  the  cases  that  also  charged  information? 

CDC [MR.  COOMBS]:  Jeter  and  Jordan,  and  important  for  us  is 

DiGilio.  DiGilio,  they  charged  photocopies.  But  if  you  look  at 
Footnote  10  in  DiGilio,  it  says  they  —  they  obviously  did  not  charge 
theft  of  information  because  if  they  would  have  charged  theft  of 
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information,  they  would  have  relied  upon  a  thing  of  value  and  stated 
the  information.  And  —  so  it's  really  easy  —  like  if  you're  going 
to  do  a  101  of  how  the  government  should  have  drafted  this  offense, 
it  would  have  been  PFC  Manning  did  steal,  to  wit:  copies  of  380,000 
records  from  the  CIDNE-Iraq  database  and  the  information  contained 
therein.  That  would  have  been  a  sufficient  specification  to  allege 
copies  of  records  and  information.  But  that's  not  what  the 
government  did.  And  when  they  —  when  they  failed  to  do  that 
again,  now  they  are  trying  to  at  this  11th  hour  ask  the  Court  to  — 
they're  not  even  asking  for  a  variance.  They're  saying,  hey,  we're 
perfectly  fine  with  the  CIDNE-I,  CIDNE-A  database  containing  more 
than  380,000  records,  even  though  they  —  the  records  and  the 
database  have  never  been  taken  from  the  government's  possession. 

It's  clear  that  the  - 

MJ:  Does  it  have  to  be? 

CDC [MR.  COOMBS]:  Yes,  under  the  641  offenses  if  what  you're 

saying  is  you're  charging  him  to  take  something.  And  the  reason  why 
—  and  that's  the  second  aspect  of  this  slide,  when  you  look  at  641, 
it's  important  not  only  to  name  the  property,  but  once  you  do  name 
the  property,  that  shows  how  you  prove  valuation  of  more  than 
$1000.00.  And  what  the  government  has  done  is  almost  kind  of  a 
schizophrenic  way  of  trying  to  prove  —  they  charged  database  and 
records,  they  want  you  to  argue  —  they  want  to  argue  that,  well. 
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okay,  we  said  that  we  really  meant  copies  of  records  and  information. 
Well,  even  assuming  the  Court  would  go  down  that  line  with  them,  they 
haven't  proven  the  value.  So  what  they  have  done  with  copies  of 
records,  they  used  the  cost  of  the  database. 

MJ:  Is  there  any  case  that  you're  aware  of  that  says  they  can’t 

do  that? 

CDC [MR.  COOMBS]:  Yeah,  all  the  cases  that  I  just  outlined  for 

the  Court.  Every  one  of  these  cases  indicate  when  you're  —  how  you 
prove  that  value. 

MJ:  Well,  there's  a  variety  of  different  ways  to  prove  value. 

CDC [MR.  COOMBS]:  It  —  there  is.  Your  Honor,  but  the  cases 

indicate  for  copies  of  records  and  then  they  —  if  the  Court  looks, 
you'll  see  when  they  say  copies  of  records  it  is  --  all  right,  the 
amount  of  time  it  took  to  print  it  —  like  per  the  Collins  case.  The 
Collins  case  they  charged  copies  of  records  and  information.  And  in 
Collins  the  Court  said,  look,  we're  going  to  avoid  the  information 
issue.  We're  going  to  go  ahead  and  go  with  copies  of  the  records. 

And  the  copies  of  the  records  —  the  value,  how  we  prove  that  was  you 
—  you  used  the  copier.  And  so  there's  ink,  there's  toner,  and 
there's  paper,  and  it's  your  time  in  copying  that.  And  that's  how 
they  got  to  their  value.  And  value  does  matter  and  how  you  prove  it. 
Because  when  you  —  when  you  take  a  look  at  all  the  641  cases,  every 
one  of  these  for  —  like  the  copy  of  record,  it  is  the  cost  of 
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production;  every  one  of  the  cases  of,  the  copy.  They're  not  mixing 
and  matching  other  things. 

MJ:  Now  let  me  ask  you  a  question  on  that.  The  641  cases 
involving  the  copy,  do  they  say,  all  right,  we've  got  this  case  on 
appeal,  we  can  get  to  the  —  I  believe  most  of  those  cases  were 
before  the  $1000.00  threshold. 

CDC [MR .  COOMBS]:  Right. 

MJ:  We  can  get  to  the  $100.00  threshold  by  going  down  the  copy 

theory,  so  we  don't  have  to  address  the  rest  of  this,  or  do  these 
cases  say  you  can't  value  it  any  other  way? 

CDC [MR.  COOMBS]:  Well,  none  —  and  in  none  of  those  other 

cases  did  they  try  to  value  it  any  other  way.  So  that's  --  that's 
what  the  defense  is  trying  to  argue  --  all  —  every  one  of  those 
cases,  when  they  had  a  copy,  they  proved  the  value  of  the  copy.  And 
it  was  through  cost  of  production  of  the  copy.  They  didn't  attempt 
to  prove  it  some  other  away.  And  when  you  think  about  it  just 
intuitively,  if  —  let's  say  —  let's  use  just  an  outside  example;  I 
go  into  Wal-Mart  and  I  steal  a  sweater  from  Wal-Mart.  And  I  leave. 
I'm  going  to  be  charged  with  stealing  a  sweater  from  Wal-Mart,  and 
that's  the  way  it  should  be  charged,  and  the  value  of  the  sweater. 
Under  the  government's  theory,  you  go  into  Wal-Mart  and  steal  a 
sweater,  they're  going  to  charge  you  with  stealing  from  Wal-Mart. 

And  they're  going  to  value  the  bricks  and  mortar  to  build  Wal-Mart, 
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the  greeter  that  meets  you  as  you  come  in  the  door  —  how  much  they 
get  paid  to  greet  people,  the  person  who  put  that  sweater  on  the 
shelf.  That's  all  this  stuff  —  that's  all  the  value  of  the 
database. 

MJ:  Does  it  make  any  difference  if  —  I  mean,  as  I'm  seeing  — 

as  I'm  looking  at  this,  you  have  a  database  management  system;  you 
have  a  database,  you  have  records,  and  you  have  information.  Now  in 
this  case  I  believe  the  allegations  are  that  PFC  Manning  took  entire 
databases  and  the  records  therein.  So  if  that's  the  case,  as  opposed 
to  stealing  the  sweater,  does  it  make  a  difference  if  you  steal 
everything  in  Wal-Mart? 

CDC [MR .  COOMBS]:  It  would.  So  let's  —  let's  carry  that 

analogy.  Let's  say  I'm  very,  very  good  at  what  I  do,  and  I  wait 
until  Wal-Mart  closes,  I  go  in  and  I  steal  everything  off  the  shelves 
to  where  there  —  there's  nothing  left  in  Wal-Mart.  You  still  cannot 
value  Wal-Mart;  the  building,  the  mortar,  the  employees.  That  has 
nothing  to  do  with  that.  You'd  still  then  say,  okay,  you  stole  — 
you  know,  let' s  say  a  million  dollars-worth  of  merchandise  and  that 
would  be  how  you  would  charge  it.  And  a  really  good  case  to  --  to 
view  on  that  is  U.S.  v.  Veloria  case  when  we  are  talking  about  the 
identity  of  the  property.  Both  U.S.  v.  Veloria  and  U.S.  v  Wilkins 
stand  for  both  the  identity  of  property  and  the  identity  of  who  you 
escape  from.  That  idea  is  important  because  what  you  charge  is  what 
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you  ultimately  have  to  prove.  And  so  in  Gloria  you  have  an 
individual  who  steals  a  debit  card  and  goes  on  a  shopping  spree.  And 
he's  charged  with  —  with  stealing  from  USAA.  And  then  everyone 
agrees,  you  know  what,  he  really  —  he  didn't  steal  from  USAA,  he 
stole  from  the  owner  of  the  debit  card.  And  so  during  the  guilty 
plea,  they  just  changed  that  —  they  don't  do  anything  with  the 
Charge  Sheet.  And  ACCA  says,  wait  a  second,  you  charged  stealing 
from  USAA.  So  you  need  to  prove  stealing  from  USAA.  But  more 
importantly  for  our  case,  ACCA  talks  about  a  footnote  that  not  only 
that,  you  —  you  charged  stealing  $500.00  —  more  than  $500.00  — 
money.  We're  not  —  we're  not  going  to  put  aside  this  issue  because 
we're  going  to  rule  against  you  on  changing  the  identity  of  the 
person,  but  you  didn't  charge  the  right  thing.  He  never  took  money. 
He  took  merchandise.  And,  so  he  used  the  debit  card  buy  a  whole 
bunch  of  non-important  items.  That's  what  he  actually  took.  And  so 
you  —  you've  even  got  the  property  wrong. 

In  the  Wilkins  case  —  and,  I'm  sorry,  the  Wilkins  case  is 
—  is  the  wallet  case  —  you  have  an  idea  of  being  charged  with 
taking  $75.00  --  property,  and  then  they  ultimately  proved  that  he 
took  the  wallet,  but  he  was  charged  with  the  $75.00. 

MJ:  Well,  here  you  have  a  database  containing  records.  In  that 

case,  if  you  had  a  wallet  containing  $75.00,  wouldn't  you  have  the 
theft  of  —  if  he  didn't  have  the  $75.00,  you'd  still  get  the  wallet. 
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right? 

CDC [MR .  COOMBS]:  Well,  if  —  again  - 

MJ:  Or  if  he  didn't  have  the  wallet,  you'd  still  get  the 


$75.00? 

CDC [MR .  COOMBS]:  Perhaps.  And  —  that’s  why,  again,  in  this 

case,  if  —  if  you  thought  that  the  records  was  not  descriptive  of 
the  database,  you  might  get  to  database  and  records.  But  you 
certainly  don’t  get  to  copies  of  records  and  information.  And  the 
reason  why  you  don’t  get  there  is,  when  we  incorporate  64  - 

MJ:  Well,  let's  —  let’s  tailor  our  argument  that  way  because  I 

can  tell  you  pretty  much  that’s  the  road  I’m  going  on. 

CDC [MR.  COOMBS]:  Yes.  So  when  you  get  there  —  so  if  you 

say,  okay,  look,  I  think  the  database  that  you  allege  —  and  when  you 
say  containing  more  than  380,000  records,  that  wasn't  descriptive, 
that  was  - 

MJ:  Yes. 

CDC [MR.  COOMBS]:  -  alleging  both. 

MJ:  Yes. 

CDC [MR .  COOMBS]:  -  okay,  so  the  defense  would  take  issue 

with  that. 

MJ:  I  understand. 

CDC [MR.  COOMBS]:  But  even  when  you  get  there  then  —  okay  — 

well,  then  —  when  you  come  down  to  what's  important  then  for  the 
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917,  did  you  value  —  did  he  take  the  database  and  did  you  value  it? 
Well,  he  didn't  take  the  database.  So  we  can  scratch  that  out.  So 
if  the  Court  were,  in  fact,  going  to  be  lining  through  something  for 
findings,  let's  say  on  this,  you'd  line  through  database  'cause  he 
still  —  he  clearly  didn't  steal  the  database.  The  database  was 
never  taken.  So  now  you  are  left  with  380,000  records.  Well,  he 
didn't  steal  the  records.  He  stole  copies,  because  those  records 
were  never  taken  from  the  government's  possession.  So  if  --  even  if 
the  Court  gets  there,  then  what's  the  value  of  the  records?  Well, 
they  did  do  a  kind  of  how  —  you  know,  how  much  does  a  specialist  get 
paid  and  they  worked  on,  you  know,  entering  information  in  the 
database.  They  valued  the  record,  but  not  the  copy  of  the  records. 
And  the  copy  of  the  records  would  be  the  cost  of  production.  So  if 
they  actually  charged  correctly,  then  they  would  have  said,  okay,  the 
cost  of  production.  So  it  would  have  been  the  CD  that  was  used  to 
burn  the  records  down  on.  And  it  would  have  been  the  time  that  PFC 
Manning  used  in  order  to  burn  those  re  —  burn  that  CD.  If  that  CD 
was  government's  property,  it  would  have  been  the  value  of  the  CD. 
That  would  have  been  the  —  the  cost  of  records.  And  that  probably  - 
-  almost  definitely  would  not  get  you  over  the  $1000.00.  And  that 
would  be  why  a  good  prosecutor  would  say,  you  know  what,  I'm  going  to 
charge  also  and  the  information  contained  therein.  And  if  you  did 
that,  then  you  would  have  to  do  kind  of  a  thieves  market  for  the 
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value  of  the  information.  But  the  problem  with  the  government's 
theory  is,  they  seem  to  think  that,  okay,  we  are  going  —  we're  going 
to  allege  database,  and  we  are  going  to  do  that,  and  they're  kind 
of  the  reason  why  we're  going  to  do  that  is  we  know  we  spent  millions 
and  millions  and  millions  of  dollars  creating  this  database.  And 
surely  we  throw  enough  zeros  at  the  Court,  that's  going  to  be  enough 
to  get  over  the  $1000.00  threshold.  But  they  ignore  the  fact  that  he 
never  took  the  database.  And  —  and  so  even  if  the  Court  were 
were  inclined  to  say  database  and  records,  we  still  have  a  problem 
here,  he  hasn't  been  charged  with  the  right  thing.  The  right  thing 
was  copy  of  records  and  information.  And  there's  no  way  that  you 
extrapolate  from  database  records  to  copies  of  records  and 
information.  And  that  is  not  only  borne  out  in  all  the  641  cases 
that  clearly  say  when  we  do  copies  of  records,  you  allege  them.  And 
—  and  that's,  again,  Hubbard ,  Jeter,  and  DiGilio.  And  then  when  you 
have  information,  you  allege  it  under  a  thing  of  value.  And  that  is 

MJ:  Well,  let  me  ask  you  a  question  on  that.  Can  —  can  you 

have  a  record  without  information? 

CDC [MR.  COOMBS]:  You  could. 

MJ:  How? 

CDC [MR.  COOMBS]:  A  photograph.  So  you  could  have  —  and 

that's  —  I  believe  that's  the  DiGilio  case.  You  —  you  could  have  a 
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photograph  of  something  and  that  would  not  have  information  in  it. 

So  if  --  the  --  the  one  case  in  which  he  sold  to  Jane' s  Weekly  and 
actually  it's  not  the  —  well,  the  —  and  I'm  drawing  a  blank  on  the 
case.  But  there  —  one  case  - 

MJ:  There  are  a  lot  of  these  cases.  I  understand  that. 

CDC [MR .  COOMBS]:  -  when  he  sold  to  Jane's  Weekly,  a 

photograph,  and  that  was  charged  as  a  record.  And  they  charged  it 
not  as  a  copy  because  it  was  the  original.  The  individual  cut  off 
the  secret  --  the  border  basically  that  had  the  classification  of  the 
photo . 

MJ:  Mori  son? 

ATC [CPT  von  ELTEN] :  Yes,  ma'am. 

CDC [MR.  COOMBS]:  All  right.  I  will  say,  yes,  to  that. 

MJ:  Okay. 

CDC [MR .  COOMBS]:  So  —  yeah  —  so  Morison.  So  he  —  he  cuts 

off  the  border  —  that's  a  record.  And  that  would  not  have 
information,  as  we  understand  the  value  of  information.  So  that 
would  be  an  example  of  that  where  you  could  have  380,000  photographs. 
The  —  the  information,  when  you  charge  that,  that  then  bears  out  in 
all  the  641  cases,  and  the  government's  supplement  motion,  and  the 
cases  we  gave  to  the  Court,  if  that  were  an  issue,  then  --  then  you 
would  have  an  argument  of  can  you  charge  classified  information?  You 
would  have  an  argument  of  First  Amendment  and  whatnot.  And 
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MJ:  With  classified  information? 

CDC [MR .  COOMBS]:  Even  with  classified  information  you  would 

have  an  argument  - 

MJ:  What  would  be  your  First  Amendment  argument  with  classified 

information? 

CDC [MR.  COOMBS]:  Well,  I  would  tell  you  that  if  I  were  going 

to  make  that  one,  that  would  have  been  made  a  long  time  ago  with  all 
my  other  motions  because  I  would  have  said,  ah,  they  charged 
information,  I'm  going  to  allege  that  —  even  though  there  are 
circuits  that  say,  yeah,  information  falls  under  thing  of  value,  and 
that  was  Congress's  intent,  there  are  —  there's  contrary  law.  And 
so  I  would  have  argued  that  - 

MJ:  By  one  circuit,  right? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  And  I  would  argue  that, 

and  I  would  have  argued  for  the  rule  of  lenity.  But  they  didn't 
charge  information.  And  —  even  now  when  you  take  a  look  at  the 
government's  motion  and  response  motion,  they  seem  to  have  bounced 
back  and  forth  on  all  these  terms,  as  if  —  sometimes  they're 
alleging,  yeah,  he  took  the  database  and  records,  and  other  times 
they're  saying,  well,  it's  clear,  you  know,  he  took  copies  of  records 
and  the  information  therein.  And  it's  clear  that  he  violated  our 
exclusive  possession  of  that  information.  But  none  of  that  s  clear. 
And  even  though  we're  in  a  notice  pleading,  that's  not  the  situation 
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in  this  case  where  you  actually  —  you  pled  something  and  you  own  it. 
And  what  you  should  own  is  what  you  pled,  and  that's  a  database,  or 
at  most  maybe  database  and  the  records.  But  they  haven't  proven 
that.  And,  you  know,  when  you  —  when  you  take  a  look  at  like  the 
wallet  example,  again  —  and  let's  take  money  out  because  money  has 
an  intrinsic  value  that  you  look  and  see.  Let's  say  he  was  charged 
with  stealing  a  wallet  and  five  business  cards.  And  ultimately,  you 
know,  that's  —  that's  what  we  see  and  we're  trying  to  prove  value, 
where  how  —  the  way  you  prove  the  value  for  the  business  cards  would 
be  charging  the  information.  I  mean,  perhaps  the  copy  the  actual 
records,  excuse  me,  if  the  business  cards  had  —  you  know,  they  were 
made  out  of  gold  or  something,  and  then  you  could  say,  wow,  this  is  a 
very,  very  expensive  business  card.  But  more  than  likely  the 
business  card  would  be  information.  And  then  you'd  be  valuing  the 
information.  So  you'd  be  proving  the  five  business  cards  had  a 
certain  value.  And  the  way  that  you'd  do  that  is  have  somebody  come 
in  and  say,  look,  the  information  on  these  bus  on  this  business 
card,  when  you  put  it  collectively  or  independently,  has  value. 

MJ:  So  when  it  can  --  where  I'm  having  a  little  trouble  here  -- 

so  taking  that  analogy  and  assuming  the  charge  sheet  would  have  to 
read,  stole  a  wallet,  five  business  cards,  and  the  information  in  the 
business  cards? 

CDC [MR.  COOMBS]:  Right.  And  when  —  when  you  take  a  look  at 
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the  641  offenses  —  if  you're  charging  for  a  641  —  if  you're 
charging  for,  you  know,  under  121,  you're  saying  what  he  stole  of  a 
value  of  something,  and,  again,  I  guess  you  would  have  to  prove  the 
value  of  the  card.  But  for  a  641,  the  way  it  lays  out  of  record, 
voucher,  money,  or  thing  of  value,  then  you  need  to  —  you  need  to 
fit  into  one  of  those  things.  Of  —  If  it's  money,  fine,  you  plead 
that.  If  it's  record,  you  plead  that  —  or  copy  of  record.  And  the 
thing  of  value  is  where  you  find  the  information.  So  every  case  in 
which  they  —  they  charge  information,  it  was  under  a  thing  of  value. 
And,  again,  the  majority  of  the  cases  kind  of  avoid  the  concern  on 
information  because  the  copy  of  the  record  could  independently  get 
them  to  the  641  outcome  that  they're  asking  for. 

So  based  upon  the  government's  responses,  they  —  they  are 
not  asking  for  any  variance  under  603.  They're  going  straight  with, 
we  charged  what  we  charged  and  you  were  put  on  notice.  And,  again, 
when  you  go  back  to  their  Bill  of  Particulars  and  you  go  back  to 
their  instructions,  there's  no  way  that  you  could  get  copy  of  records 
and  information  from  the  way  they  charged.  And  because  of  that  the 
government  hasn't  proven,  even  with  all  the  evidence  taking  in  light 
most  favorable  to  the  government  and  drawing  all  reasonable 
inferences,  you  do  not  have  an  item  that  they've  alleged  actually 
being  taken.  It's  never  been  taken.  And  then,  obviously,  what  was 
taken  they  didn't  charge.  And  even  what  was  taken,  they  never 
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valued.  So  you've  got  multiple  problems  with  the  government's  641 
charges  in  this  incident. 

MJ:  All  right. 

CDC [MR.  COOMBS]:  So  subject  to  your  questions,  ma'am. 

MJ:  The  chart  that  you're  using  has  not  been  marked.  We  need 

to  have  it  marked  as  an  appellate  exhibit. 

CDC [MR.  COOMBS]:  Yes,  ma'am. 

MJ:  Okay.  No,  I  think  —  yes,  let  me  —  I  do  have  one  more 

question.  Your  brief  talks  about  the  government  requiring  the  —  the 
need  to  prove  substantial  interference  with  the  government's 
interest.  Now  there's  two  different  theories;  you  have  your  stealing 
and  your  purloining,  as  well  as  your  knowingly  converting;  does  that 
element  apply  to  both? 

CDC [MR.  COOMBS]:  Yeah  —  well,  I  mean  —  I  guess  the 

government ' s  - 

MJ:  I  believe  my  instruct  —  I'm  sorry,  go  ahead. 

CDC [MR.  COOMBS]:  -  the  —  yeah,  the  government's  gone  back 

and  forth  on  whether  or  not  purloin  is  —  is  one  of  the  theories 
they're  going  forward  on.  But  even  if  it  is,  I  think  it  doesn't 
really  matter  —  when  you  —  the  Supreme  Court  indicated  that 
certainly  every  steal  is  a  conversion.  But  - 

MJ:  I  think  that's  the  other  way  around. 

CDC [MR.  COOMBS]:  No.  I  mean,  every  —  every  time  you  steal 
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something  it  would  be  a  - 

2 

MJ:  You  convert  it? 

3 

CDC [MR .  COOMBS]:  -  a  conversion.  And  every  time  —  that  a 

4 

conversion  would  not  necessarily  be  a  theft.  And  so,  you  know,  the  - 

5 

-  in  this  instance  then  they  would  have  to  prove  at  least  substantial 

6 

interference  in  order  to  meet  either  one  of  those.  So  I  guess  the 

7 

idea  of  —  of  taking  the  property,  either  permanently  or  temporarily. 

8 

would  have  to  be  a  substantial  interference  under  the  defense's 

9 

position. 

10 

MJ:  All  right.  Thank  you.  And  you  can  have  that  marked  at 

11 

recess,  unless  you  have  a  copy  ready  to  go.  Mr.  Coombs,  do  you  mind 

12 

if  we  leave  that  chart  up  during  the  government's  argument? 

13 

CDC [MR.  COOMBS]:  Not  at  all,  Your  Honor. 

14 

MJ:  Or  least  have  it  available  to  be  put  up.  Captain  von 

15 

Elten? 

16 

[ Pause] 

17 

ATC [CPT  von  ELTEN]:  Ma'am,  the  Charge  Sheet  alleges  that 

18 

databases  containing  records  are  stolen,  it  also  specifically  adds  a 

19 

thing  of  value  in  the  Charge  Sheet,  which  puts  the  accused  on  notice 

20 

that  information  would  be  at  play. 

21 

MJ:  How  does  that  put  him  on  notice  that  information  would  be 

22 

at  play? 

23 

ATC [CPT  von  ELTEN]:  A  thing  of  value  as  it  plainly  means 
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anything  —  broadly  —  should  be  broadly  construed  in  accordance  with 
the  definition  set  forth  in  the  government's  brief  about  a  thing  is 
anything  including  a  property  right  or  ownership. 

MJ:  So  if  you  put  a  thing  of  value,  that  puts  the  defense  on 

notice  of  everything  under  the  sun? 

ATC [CPT  von  ELTEN] :  Everything  related  to  the  intrinsic 
qualities  of  the  charged  property.  Ma'am,  the  United  States  defined 
database  as  a  collection  of  records  and  a  compilation  of  information. 
That  definition  is  in  accordance  with  Black's  Law  Dictionary. 

MJ:  Are  you  asking  me  to  take  judicial  notice  of  that 

definition? 

ATC [CPT  von  ELTEN]:  Yes,  Ma'am. 

MJ:  Mr.  Coombs,  any  objection? 

CDC [MR .  COOMBS]:  No  objection  to  taking  judicial  notice  of 

the  definition.  Your  Honor. 

MJ:  Okay.  Go  ahead. 

ATC [CPT  von  ELTEN]:  Database  —  the  use  of  the  term  database  is 
important  because  it  puts  the  defense  on  notice  of  many  things;  one, 
the  source  of  the  information.  It  also  gives  the  accused  notice  that 
the  database  is  electronic  in  nature.  And  that's  important  for 
defense's  arguments  regarding  copies  and  originals,  and  the 
difference  between  the  two.  Also,  the  database  gives  notice  by 
charging  the  CIDNE  database  versus  NCD  database.  It  gives  specific 
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notice  of  the  types  of  information  at  issue  as  it's  related 
inherent  to  the  database  in  the  records  that  would  be  contained  in 
there . 

The  United  States  would  direct  the  Court's  attention  to 
United  States  v.  Bottone  where  the  2nd  Circuit  upheld  a  charge  of 
under  a  different  section,  2314,  but  a  charge  where  —  it  was 
documents  related  to  cultures,  and  what  was  actually  stolen  in  that 
case  were  a  photocopies  made  --  not  with  government  property,  but 
made  by  the  defendants  in  that  case  themselves.  But  the  2nd  Circuit 
upheld  that  as  being  —  as  being  documents. 

MJ:  What  type  is  the  —  what  type  of  authority  would  a  case 

interpreting  a  different  statute  be  with  respect  to  this  statute? 

ATC [CPT  von  ELTEN] :  It  would  be  persuasive,  ma'am. 

MJ:  Okay. 

ATC [CPT  von  ELTEN]:  Ma'am,  electronic  records  are  created  by 
downloading  them  to  a  computer.  And  the  Charge  Sheet  gives  notice  of 
that  by  defining  the  specific  database  and  the  records. 

MJ:  How  does  it  give  notice  of  a  copy? 

ATC [CPT  von  ELTEN]:  Because  —  to  access  a  record  from  a 
database  inherently  and  to  pull  it  down  to  remove  it  from  the 
database  is  to  create  a  copy  by  its  very  nature.  It  exists  it 
coexists  in  multiple  places  simultaneously  because  it's  electronic. 
The  records  remained  the  property  of  the  United  States  government  at 
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all  times.  And  that's  why  the  defense  reliance  on  Veloria  is  not 
appropriate  here  because  the  ownership  of  the  records  is  not  in 
dispute.  PFC  Manning  created  the  records  that  he  stole  and  converted 
with  government  property,  thus  they  remained  United  States  government 
property  at  all  times. 

MJ:  Okay,  you  just  said  he  created  the  records,  he  stole,  and 

he  converted.  What  is  the  government's  theory  or  theories  of  how 
this  was  accomplished? 

ATC [CPT  von  ELTEN] :  Conversion,  first,  ma'am,  would  be  done  in 
two  ways.  The  first  way  would  be  by  taking  records  the  United 
States  records  and  exporting  them  to  an  unauthorized  party; 

WikiLeaks.  The  second  would  be  he  deprived  the  United  States 
government  of  the  exclusive  use  of  the  information. 

MJ:  So  he  deprived  —  so  is  that  —  is  that  your  theory  —  your 

stealing  theory  or  your  purloining  theory? 

ATC [CPT  von  ELTEN]:  So  —  the  stealing  and  purloining  would  go 
to  the  first  conversion  theory  as  well,  ma'am.  That  by  taking  United 
States'  property  out  of  the  United  States'  possession  into  his 
possession  —  the  crime  is  completed  there,  but  it  also 
furthermore,  by  exporting  those  records  to  an  unauthorized  party  that 
also  is  just  an  additional  step  in  effect. 

MJ:  So  the  giving  to  —  or  communicating  to  unauthorized  party, 

is  that  where  the  conversion  steps  in  or  is  it  a  conversion  from  the 
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1  beginning? 

2  ATC [CPT  von  ELTEN] :  It ' s  a  conversion  —  it's  a  conversion  once 

3  they  are  removed  from  the  exclusive  possession  of  the  United  States 

4  government.  If  it  were  a  rifle,  for  instance,  in  a  locker,  and  I  was 

5  to  take  it  to  my  personal  residence,  I  have  stolen  and  converted 

6  rifle  at  that  point.  The  conversion  of  the  information  occurs  when 

7  the  information  is  disseminated  beyond  unauthorized  personnel. 

8  MJ:  All  right,  the  instructions  I'm  going  to  have  say  that  for 

9  conversion,  the  misuse  must  seriously  and  substantially  interfere 

10  with  the  United  States  government's  property  rights.  How  does  it  do 

11  that  in  this  case? 

12  ATC [CPT  von  ELTEN]:  Beause  the  United  States  has  a  well-defined 

13  interest  in  exclusively  possessing  that  information.  There's  been 

14  much  information  presented  discussing  that.  And  once  it  leaves  the 

15  exclusive  possession  of  the  United  States,  the  United  States  rights 

16  and  interests  are  lessened  and  significantly  decreased. 

17  MJ:  Okay. 

18  ATC [CPT  von  ELTEN]:  I  would  point  the  Court  to  Mr.  Lewis’ 

19  testimony  about  that.  Back  to  the  point  about  the  electronic 

20  records,  ma'am,  the  defense  rely  —  talks  about  DiGilio,  and  the 

21  other  case  would  be  Friedman ,  where  photocopies  or  carbon  paper  are 

22  charged,  but  that's  —  that's  different  because  the  photocopy  or 

23  carbon  paper  is  something  specifically  different.  Here  electronic 


10489 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


e 


records  have  been  charged  and  the  evidence  has  been  related  directly 
to  the  electronic  records  that  were  stolen  and  converted. 

Furthermore,  Your  Honor,  the  accused  himself  referred  to  the 
databases  —  or  the  rec  —  to  the  property  he  stole  and  converted  as 
databases  in  his  chats  with  Mr.  Lamo. 

MJ:  What  difference  does  that  make? 

ATC [CPT  von  ELTEN] :  It  means  that  he  thought  he'd  stolen 
databases  and  records.  Furthermore  he  referred  to  them  as  being  the 

M J :  So  if  the  charge  sheet  is  defective,  the  government  can 
come  in  and  say,  well,  the  accused  knew  that  —  like  in  Wilkins,  when 
the  person  escaped  from  the  custody  of  A,  but  charge  sheet  said  B, 
the  fact  that  the  accused  knew  it  was  B  and  not  A  is  enough  to  save 
the  specification? 

ATC [CPT  von  ELTEN]:  We're  saying  that  it's  —  that  we  charged  A 

and  it  is  A,  and  the  accused  said  it  was  A.  In  Wilkins  it  was  two 

totally  different  things;  a  wallet  and  money.  Here  we're  saying  we 
charged  electronic  records  - 

MJ:  No,  I'm  talking  about  —  maybe  I  have  the  wrong  case  —  the 

case  with  the  escape  from  custody  of  Person  A  instead  of  Person  B. 

ATC [CPT  von  ELTEN]:  So  in  that  case  the  United  States'  argument 

would  be  that  —  it  would  be  saying  that  the  —  weren't  —  prop  — 

government  --  that's  an  ownership  issue  and  this  is  —  that'd  be  a 
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source  and  —  as  pointed  out  earlier,  the  database  is  defined  by  the 
source  of  it.  So  it  would  be  saying  if  we  charged  —  got  records 
from  NCD  and  proved  records  from  some  other  database,  that  argument 
would  be  appropriate  in  those  circumstances. 

MJ:  Even  though  the  accused  knew  they  were  from  the  other 

database? 

ATC [CPT  von  ELTEN] :  But  our  cases  we're  saying  something 
slightly  different. 

MJ:  Go  ahead.  Let's  just  —  we'll  move  on. 

ATC  [CPT  von  ELTEN]:  Furthermore,  the  accused  also  described  the 
search  functionality  in  his  chats  with  Mr.  Lamo. 

MJ:  Okay,  well,  let's  —  I  don't  care  what  the  accused 

described.  Go  ahead. 

ATC [CPT  von  ELTEN]:  Yes,  ma'am.  Information  is  related  to  the 
charges  in  two  ways;  one,  it's  a  thing  of  value  as  charged;  and,  two, 
it's  an  intrinsic  quality.  The  defense  talked  about  a  record  —  a 
photograph  not  having  information  in  it.  The  United  States  would 
point  the  Court's  attention  to  Seagraves,  which  has  been  referenced 
in  many  of  the  641  cases.  And  in  that  case  maps  were  stolen  and 
their  value  was  assessed  at  over  $5000.00  based  on  the  information 
contained  in  the  maps. 

MJ:  Did  the  government  --  is  that  part  --  that  case  in  the 

government's  brief  anywhere? 
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ATC [CPT  von  ELTEN] :  No,  ma'am. 

MJ:  Okay,  can  you  please  provide  the  Court  with  it  after  your  - 

ATC [CPT  von  ELTEN]:  Yes,  ma'am. 

MJ:  -  after  the  recess?  Thank  you. 

ATC [CPT  von  ELTEN]:  So  information  is  an  intrinsic  quality  in  a 
record.  In  Lambert ,  the  Court  said  that  a  man  of  common  intelligence 
would  understand  —  in  1979,  the  electronic  record  necessarily 
includes  information.  In  1979,  computers  were  much  less  widespread 
than  they  are  today  information  should  be  understood.  Also,  ma'am, 
as  intangible  property  falls  within  the  broad  treatment  of  641  as 
addressed  in  the  briefs.  I'd  like  to  talk  a  little  bit  about  the  9th 
Circuit . 

MJ:  Go  ahead. 

ATC [CPT  von  ELTEN]:  The  9th  Circuit's  understanding  of  641  and 
applying  it  only  to  tangible  property  totally  defeats  the 
Congressional  and  Supreme  Court's  interpretation  of  the  statute. 

MJ:  Okay,  are  you  talking  Chappell ?  You  talking  the  Chappell 

case? 

ATC [CPT  von  ELTEN]:  Yes,  Ma'am. 

MJ:  Okay. 

ATC [CPT  von  ELTEN]:  And,  also  —  again,  as  discussed  later  in 
Tobias.  In  Tobias,  the  9th  Circuit,  first  of  all,  acknowledges  the 


10492 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


o 


existence  of  what  they  call  —  what  they  deem  classified  information 
exception.  The  9th  circuit  is  says  when  it  acknowledges  that  even 
though  it's  not  applicable  in  that  case,  that  it  can  be  applied,  just 
not  in  those  circumstances. 

MJ:  Talk  to  me  about  the  classified  information  exception. 

ATC [CPT  von  ELTEN] :  It  doesn't  —  the  9th  Circuit  doesn't 
expound  on  what  that  means  or  what  the  circumstances  are,  but  given 
their  ruling  in  Schwartz ,  which  conflicts  with  their  rulings  in 
Tobias  and  Chappell. 

MJ:  But  that's  interpreting  a  different  statute,  too,  right? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am.  It's  interpreting  a  different 
statute  as  well.  It  would  seem  they're  saying  in  certain 
circumstances,  also  as  recognized  Judge  Winter,  who  also  does  not 
define  circumstances  would  be,  that  —  where  information  is  at  issue 
it  can  be  —  it  can  be  subject  to  641  as  intangible  property. 

MJ:  Okay. 

ATC [CPT  von  ELTEN]:  The  second  part  is  that  the  9th  Circuit 
reaches  that  determination  by  relying  on  its  --  on  a  common  law 
understanding  of  conversion,  which  is  wholly  inapplicable  because 
Congress  used  words  in  drafting  641  that  aren't  within  the  common  law 
at  all,  those  being  steal  and  purloin.  So  what  the  9th  Circuit 
effectively  does  is  to  say  we  have  common  law  restriction  for  this 
one  word,  then  Congress,  says,  okay,  we  want  to  fill  the  gaps  and 
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crevices,  and  we  want  to  create  a  broader  reach  in  a  modern  trend  of 
drafting  laws.  And  the  9th  Circuit  —  and  so  we're  going  to  use  the 
terms  not  in  the  common  law,  without  those  restrictions,  and  then  — 
and  the  9th  Circuit  in  contravention  of  the  Supreme  Court,  Morissette 
says,  well,  we're  going  apply  those  restrictions  any  way.  They  don't 
say  that  a  thing  of  value  doesn't  by  its  plain  text  apply  to 
intangible  property. 

MJ:  Now  is  there  a  different  --  distinction  between  tangible 

property  —  when  the  government  charges  tangible  property  containing 
information,  and  the  government  just  charging  information  or 
intangible  property  without  tangible  property  going  along  with  it? 
Well,  let  —  let  —  let  me  begin  with  —  what's  the  government's  view 
on  whether  computerized  records  are  tangible  or  intangible  property? 

ATC [CPT  von  ELTEN] :  The  United  States'  view  is  that  it's 
tangible  property  in  accordance  with  the  Morison  case,  I  believe  --  I 
can  get  that  for  you,  ma'am  —  it's  cited  in  the  brief  - 

MJ:  I  have  it. 

ATC [CPT  von  ELTEN]:  -  where  it  talked  about  elect  -- 

electronic  deposits  that  were  reducible  to  a  tangible  form,  that 
being  money  or  treated  as  tangible  property. 

MJ:  So  the  information  that  you're  talking  about  —  so  there  — 

there  can  be  two  different  scenarios  then  where  information  goes 
along  with  tangible  property  and  a  potential  wherein  intangible 
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property  alone  is  charged  —  somebody  goes  and  memorizes  something 
and  —  a  bank  card  and  goes  to  bank  and  uses  it? 

ATC [CPT  von  ELTEN] :  Yes,  ma'am.  That  would  be  different  types 
of  intangible  property.  Information  is  always  an  intangible 
property.  The  —  so  in  that  case  the  information  would  always  be 
intangible,  but  it  could  always  be  an  intrinsic  component  of  an 
intangible  piece  of  property. 

MJ:  And  is  that  the  government's  position  is  with  respect  to 

this  case? 

ATC [CPT  von  ELTEN]:  With  respect  to  valuation,  information  is 
intrinsic  part  of  the  tangible  document.  With  respect  to  conversion 
information  is  intangible.  Documents  themselves  are  tangible. 

MJ:  What's  the  difference  between  conversion  and  stealing  for 

tangible  and  intangible  information? 

ATC [CPT  von  ELTEN]:  The  government's  position  is,  for  stealing 
it  doesn't  matter  because  conver  —  only  conversion  has  that  common 
law  restriction  to  tangible  goods,  personal  property,  chattels, 
things  of  that  nature. 

MJ:  Okay. 

ATC [CPT  von  ELTEN]:  The  defense  talked  about  that  these  are 
copies  of  records  and  that  the  evidence  the  United  States  offered 
doesn't  support  valuation,  but,  again,  these  are  electronic  records. 
They  could  not  exist  but  for  the  databases  and  supporting 
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infrastructure  without  them. 

MJ:  Let's  put  the  slide  up.  Let's  use  that  on  this  valuation 

piece  here. 

[The  defense  slide  was  placed  on  the  projection  screen  in  full  view 
of  all  court-martial  participants.] 

MJ:  All  right,  before  you  begin,  let's  look  at  the  top  part  of 
the  slide.  Does  the  government  agree  that  that's  how  you  have  to 
prove  value  for  each  of  those  things? 

ATC [CPT  von  ELTEN] :  No,  ma'am. 

MJ:  All  right.  What's  your  position? 

ATC [CPT  von  ELTEN]:  The  position  is  that  the  records  and 
database  are  inherently  intertwined  and,  thus,  cost  of  production 
equipment  and  maintenance  goes  to  that.  Furthermore,  copies  of 
records  in  terms  of  valuation  is  not  a  meaningful  distinction  because 
those  copies  are  still  United  States  records;  they  could  not  exist 
but  for  the  database.  So  the  —  for  under  defense's  term,  we  would 
say  that  cost  of  production  equipment  and  maintenance  goes  to  —  goes 
to  those  copies  because  those  are  still  records.  The  word  "copies" 
has  no  meaning  there.  And  then  for  information  that  the  —  where  the 
evidence  has  shown  that  a  lot  of  this  infrastructure  is  put  in  place 
to  make  that  --  because  —  because  the  information  is  what  is 
important,  that  cost  of  production  equipment  and  maintenance  would  go 
to  information  as  well. 
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MJ:  So  is  it  the  government's  position  —  I'll  ask  you  the  same 

question  I  asked  the  defense  --  I  guess  using  the  Wal-Mart  analogy, 
is  —  does  it  matter  if  you  steal  a  copy  of  a  record  or  the  entire 
database? 

ATC [CPT  von  ELTEN] :  Yes,  ma'am,  it  does  matter.  Because  in  the 
Wal-Mart  analogy  one  thing  is  by  itself,  but  when  you're  taking  the 
entire  contents  of  a  store,  that  whole  infrastructure  is  there  to 
support  that.  You  know,  the  Wal-Mart,  when  it  would  do  its 
accounting,  would  recognize  all  that  as  part  of  the  cost  of  selling 
the  goods  would  be  —  you  know,  the  depreciating  the  building  and  all 
those  other  things.  So  the  government's  position  would  be,  yes, 
relevant  if  you  stole  the  entire  contents  of  Wal-Mart. 

MJ:  Assume  for  the  sake  of  argument  that  PFC  Manning  —  well, 

let's  —  let's  —  let's  just  take  a  real  example  that  could  be  a 
possibility  in  this  case.  Assume  that  there  were,  I  believe,  74,000 
records  in  the  GAL.  Assume  that's  what  was  proved  stolen.  Would  the 
cost  of  the  entire  maintenance  of  the  database  system  be  something 
that  the  government  could  use  to  value  that? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am.  So  I  know  defense  hasn't  gotten 
into  the  GAL  yet,  but  for  the  GAL,  the  —  Chief  Nixon  testified  that 
the  way  the  GAL  is  created,  and  maintained,  and  distributed,  it's 
done  at  organization  levels.  So  at  Corps,  they  maintain  the  Corps 
level,  and  then  the  way  the  Corps  maintains  it,  is  it  gets 
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information  pushed  up  from  Divisions,  it  collects  and  assembles  it, 
and  then  pushes  down  —  it  pushes  it  back  down  to  the  Division  level. 
And  the  same  thing  happens  --  at  the  Division  level  it  goes  to  and 
from  brigades,  and  back  and  forth.  And  I  —  and  Chief  Nixon's 
testimony  was  that  it  was  at  the  Division  level  GAL  —  that  that's 
what  it  looked  like  to  him.  And  in  this  case  the  cost  of  production 
of  that  portion  —  all  that  --  because  as  Chief  Nixon  testified,  but 
for  those  pieces  of  equipment  there  could  be  no  GAL;  there  would  be 
no  functionality. 

MJ:  So  if  I'm  understand  —  okay,  I'm  understanding  you  for  the 

GAL.  What  you're  saying  is  if  part  of  a  GAL  is  stolen  that  —  the 
cost  of  production  of  that  part  of  the  GAL  is  what  the  government 
believes  could  be  used  for  value  - 

ATC [CPT  von  ELTEN] :  Yes,  ma'am. 

MJ:  -  not  the  whole  GAL? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am. 

MJ:  Okay.  Because  my  next  question  would  have  been,  if  one 

address  was  stolen,  could  the  entire  production  of  the  GAL  be  used  to 
establish  value? 

ATC [CPT  von  ELTEN]:  Prorated  share.  Very  small  prorated  share. 

MJ:  Okay. 

ATC [CPT  von  ELTEN]:  The  support  costs  —  using  those  are 
addressed  —  justified  by  case  law.  In  May,  the  United  States 
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charged  the  defendant  with  converting  flight  time.  And  that  United 
States  was  not  limited  to  evidence  just  for  gasoline.  They  were  also 
able  to  use  things  that  were  intrinsic  and  apparent  to  —  to  actually 
creating  the  flight  time;  namely  —  in  that  case,  the  United  —  they 
relied  —  the  government  relied  on  pilot  salaries,  and  mechanics' 
salaries,  and  things  of  that  nature  that  went  to  support  the  flight 
time  even  though  they  were  not  actually  involved  during  the  actual 
flights . 

Similarly,  in  Zettl,  the  Court  noticed  that  personnel  costs 
were  appropriate.  Transportation  costs,  which  —  then  further  all  — 
and  it  left  open  the  broad  other  actual  cost.  The  United  States' 
position  is  these  are  actual  cost  of  create  —  of  creating  and 
maintaining  these  databases  of  records,  because  but  for  this 
infrastructure,  the  records  could  not  exist  and  could  not  be  used  as 
they  are  designed,  which  also  goes  to  the  information. 

MJ:  Well,  let's  —  let  me  —  do  you  have  any  case  law 
supporting  this  basically  value  of  the  database  management  system  and 
input  to  value  a  theft  of  a  copied  record,  if  you  would? 

ATC [CPT  von  ELTEN] :  Could  you  say  the  question  again,  please, 
ma' am? 

MJ:  Do  you  —  are  —  there  any  case  law  that  says  you  can  use  - 

-  when  you  —  when  you  go  into  a  database,  you  take  the  records  — 
the  United  States  still  has  the  records  —  that  you  can  use  the  cost 
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of  producing  the  original  records  as  a  value  system? 

ATC[CPT  von  ELTEN] :  So  the  United  States'  position  on  that  is  -- 
is  —  is  this  isn't  an  example  of  making  a  photocopy,  because  in  that 
case  like  the  photo  —  the  machinery  used  to  create  that  record  — 
the  photocopy,  is  what's  relevant.  And  here  the  infrastructure  that 
supports  the  record  that  was  made  was  —  is  all  the  computer  systems 
involved  with  it. 

M J :  Is  there  any  case  that  has  held  that? 

ATC [CPT  von  ELTEN]:  The  United  States  has  not  been  able  to  find 
any  case  that  discusses  valuation  for  electronic  infrastructure. 

[Pause] 

ATC [CPT  von  ELTEN]:  Subject  to  your  questions,  ma'am. 

MJ:  Well,  let's  —  I'm  still  back  to  your  argument  that  you  can 

use  the  valuation  of  the  whole  database  management  system.  If  so, 
you  took  —  if  you  took  one  SIGACT,  that  record  wouldn't  exist  either 
if  you  didn't  have  the  entire  database  management  system.  So  do  you 
get  to  —  do  you  get  to  value  the  entire  database  management  system 
for  the  one  record? 

ATC [CPT  von  ELTEN]:  Ma'am,  I  mean  —  those  are  support  —  those 
are  actual  costs  of  producing  --  of  producing  the  document.  That 
would  be  left  up  to  the  fact-finder  to  determine  whether  that  was 
fair  evaluation.  But  it  would  be  evidence  of  the  cost  of  the 
documents  production. 
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1  MJ:  So  you  see  —  does  the  government  see  a  distinction  between 

2  electronic  records  and  hard  copy  records?  'Cause  I  guess  the  same 

3  argument  could  be  made  when  you're  stealing  a  copy  of  the  FBI  manual, 

4  that  the  cost  of  going  into  producing  the  original  manual  would  be  — 

5  could  be  used  for  evaluation  of  that.  Would  that  be  government's 

6  position?  'Cause  I  believe  —  is  that  —  I  believe  that's  the 

7  DiGilio  case  —  I  could  be  wrong,  but  that  was  an  actual  photocopy; 

8  the  Court  said  we're  going  to  go  ahead  and  use  the  copy  and  not  got 

9  into  the  information. 

10  ATC [CPT  von  ELTEN] :  If  —  if  the  original  machinery  that  had 

11  been  used  to  produce  that  original  document  had  been  used  to  produce 

12  the  copy,  then,  yes. 

13  M J :  To  valuate  the  copy  would  you  be  able  to  use  the  production 

14  hours  that  went  into  —  okay,  so  somebody  steals  a  copy  of  Army 

15  Regulation  27-10,  do  you  use  the  cost  of  the  man-hours  that  it  took 

16  for  all  reviews  of  all  the  provisions  and  all  the  changes  and  all  of 

17  that  to  actually  produce  AR  27-10  —  and  all  the  salaries  of  the  JAG 

18  officers  that  went  into  the  27-10  to  value  the  copy  of  AR  27-10 

19  stolen? 

20  ATC [CPT  von  ELTEN]:  I  think  that's  a  fair  reading  of  the  case 

21  law,  ma'am. 

22  MJ:  Okay,  and  the  case  law  you  are  relying  on  is? 

23  ATC [CPT  von  ELTEN]:  Zettl  and  May,  in  particular. 
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MJ:  Zettl  and  May.  Okay.  All  right. 

ATC [CPT  von  ELTEN] :  Thank  you. 

MJ:  All  right.  Defense? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  So  just  carrying  on  with, 

I  guess,  what  you  ended  up  on  the  government,  we  would  look  to  United 
States  v.  Jordan  as  a  good  case  for  the  Court  to  look  at.  In  that 
case,  you're  dealing  with  theft  of  NCIC  records.  And  the  government 
there  did  not  charge  the  database;  like  you  stole  the  NCIC  database, 
they  charged  theft  of  the  copy  of  the  records.  And  so  when  you  look 
at  the  charge  sheet  —  or  —  excuse  me,  when  you  look  at  the  - 

MJ:  Did  they  steal  a  certain  amount  of  NCIC  records  or  all  of 

the  NCIC  records? 

CDC [MR.  COOMBS]:  They  stole  a  certain  amount.  So  when  you 

look  at  the  case,  it  lays  out  the  actual  charge.  And  so  for  copies  - 
-  'cause  what  they  did  is  they  printed  out  copies  of  NCIC  records 
that  were  for  individuals  who  were  --  who  had  ongoing  cases.  And  so 
they  wanted  to  basically  give  them  that  information  for  the  benefit 
of,  I  guess,  their  defense. 

So  when  they  charged  copies,  they  charged  as  obtaining 
printouts  of  criminal  records  of  absentee  voters,  and  then  delivered 
the  printouts,  which,  as  property  of  United  States,  had  a  value  in 
excess  of  $1000.00.  So  they  charged  it  as  the  printouts 
specifically.  When  they  charged  information,  they  charged  it  a  thing 
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of  value  of  the  United  States;  that  is  information  contained  in  the 
NCIC  records.  And  actually  I  --  the  Jordan  facts  are  --  it  was  for  a 
—  printouts  of  absentee  voters,  so  it  actually  was  contesting  an 
election.  But  when  you  look  at  that,  the  way  you  charge  it,  Jordan 
clearly  indicates  there's  a  difference  between  the  actual  record  and 
a  copy  of  the  record  and  information  within  the  record.  The 
government  says,  yeah,  a  database  is  electronic,  and  that  —  and  so 
you  —  it  exists  as  it  does  and  a  copy  doesn't  make  any  difference. 
But  that's  not  true.  Because  you  could  have  —  like  on  my  computer, 
I've  got  a  copy  of  a  motion;  someone  could  go  on  my  computer  and  take 
it  —  actually  take  that  off  of  my  computer  to  where  I  no  longer  have 
access  to  it.  And  that  would  be  taking  of  the  record,  what  the 
government  actually  charged  to  where  - 

MJ:  How  would  you  take  the  government  --  how  would  you  possibly 

take  the  government's  database  unless  you  went  into  all  the  servers 
and  —  how  would  you  do  that? 

CDC [MR.  COOMBS]:  Yeah,  and  that's  the  problem  the 

government's  charging.  But,  I  guess,  if  —  if  they  were  charging 
records,  like  he  stole  the  records,  you  could  go  on  to  the  database, 
download  and  delete  —  download  all  the  information,  delete  the 
information  to  where  you  have  taken  it  now.  To  now  when  somebody 
goes  to  the  database,  there's  nothing  there.  And  you  see  that 
oftentimes  in  cases  where  somebody's,  you  know,  broken  into 
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somebody's  computer,  stole  all  the  information,  and  then  stripped  — 
and  then  basically  deleted  their  computer  to  where  now  when  they  go 
into  their  computer  it's  not  there.  They've  clearly  stolen  the 
actual  records  in  that  instance.  So  that  individual  can't  access  — 
access  it  anymore.  And  we  look  at  some  of  the  641  cases,  when  they 
are  talking  about  whether  or  not  the  government  has  been  deprived  of 
anything,  they  say,  look,  the  government  never  lost  the  actual 
records.  And  all  those  cases  then  say,  well,  okay  —  well,  yes,  but 
you  were  charged  with  a  copy  of  the  record.  And  when  you  made  a  copy 
of  the  record,  you  know,  that  is  what  is  being  said  is  the 
government's  record.  So  once  you  made  it's  a  copy  —  it's  the  copy 
of  the  record.  So  that  is  what  was  taken  and  that's  what  we're 
valuing.  And  —  and  so  in  this  instance,  you  know,  you  need  to  value 
what  it  is,  and  that's  the  copy  of  the  record.  Now  when  the 
government  says,  well,  you  can  consider  the  cost  of  production  of  the 
database,  as  the  Court  says,  if  it's  one  SIGACT,  how  far  back  do  you 
go  or  —  or  the  27-10  manual  or  AR  —  regulation  —  what  do  you 
consider?  And  if  you  just  took  the  27-10,  do  you  considered  all  the 
hours  of  manpower?  Well,  the  government  would  say,  yes.  And  clearly 
case  law  doesn't  support  that  because  in  every  one  of  these  641 
cases,  when  it's  a  copy,  they  value  the  copy.  And  it's  usually  the 
cost  of  production  of  the  copy. 

MJ:  Is  the  defense  aware  of  any  case  involving  theft  of  an 
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1  entire  database  or  entire  electronic  record? 

2  CDC[MR.  COOMBS]:  Well  —  and,  again,  I  guess,  here  the  -- 

3  when  we  say  the  entire  database,  it  wasn't  the  entire  database.  Even 

4  at  the  time  that  he  took  it,  it  wasn't  the  entire  database  because 

5  the  SIGACT  database,  the  GAL  database  —  I  guess  maybe  the  SOUTHCOM 

6  database  you  might  be  able  to  say  that  was  all  the  records  within  the 

7  database  because  that  wasn't  updated. 

8  MJ:  Well,  let's  talk  about  each  one  them;  CIDNE-A  and  CIDNE-I. 

9  CDC [MR.  COOMBS]:  Every  day  that  database  changes;  additional 

10  information  gets  put  on  there.  And  the  government  offered 

11  information  to  try  to  narrow  down  the  timeline  when  he  took  it 

12  because  they  said  we  did  —  we  did  shots  —  screenshots  of  --  or  not 

13  screenshots,  but  we  did  forensic  research  of  the  last  SIGACT  that  is 

14  in  the  information  charged,  or  the  —  excuse  me,  the  copies  of  the 

15  records  charged  with  the  --  the  time  on  the  actual  database  of  when 

16  the  next  SIGACT  was  put  there.  And  so  we  can  narrow  down  the  time- 

17  group  of  when  he  must  have  taken  the  copy  of  the  records  because  it 

18  no  longer  —  it  doesn't  have  this  additional  SIGACT  that  fell  in  a 

19  minute  later  or  whatnot.  And  so  that  database  is  constantly  growing. 

20  He  didn't  steal  the  database,  obviously,  he  took  copies  of  the 

21  records  within  the  database  at  a  particular  time.  Same  thing  with 

22  the  GAL  or  both  CIDNE-I  and  CIDNE-A  database  would  be  identical; 

23  records  - 
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MJ:  But  at  the  time  he  allegedly  went  in  there  and  took  it  that 

was  the  scope  of  the  database  at  that  time? 

CDC [MR .  COOMBS]:  I  don't  know  if  you  can  even  say  that 

because  the  —  he  took  it  up  to  December  31st  and  he  took  it  in 
January,  so  they  were  —  they  were  records  that  were  put  in  there 
between  the  time  that  he  took  it.  And  the  reason  why  that's  a  cutoff 
—  the  evidence  shows  you  can  export  SIGACTS  by  months  from  Excel. 

So  he  exported  up  to  December  31st.  So  it  wasn't  even  at  the  time 
the  entire  database.  And  the  same  thing  with,  you  know,  we'll  talk 
about  GAL  --  I'm  —  in  fact.  I'll  just  transfer  to  the  GAL  argument 

here,  well,  but  the  same  thing  would  be  true  of  the  GAL  of 

undoubtedly  every  day  there  are  email  addresses  both  being  added  and 
taken  off  if  it  was,  in  fact,  what  the  government  alleges. 

The  government  says  that,  you  know,  they  cited  the  one  case 
that  a  map  has  information  and,  therefore,  you  know,  that  --  that 
shows  you  that  a  photo  would  be  the  same,  but  a  map  and  photo  is  kind 

of  apples  and  oranges.  And  clearly  a  map  has  a  lot  more  data  in  it, 

just  looking  at  it,  than  a  photo  does. 

MJ:  Well,  a  photo  of  a  sensitive  area  that  nobody's  seen, 
wouldn't  that  have  information  that  would  be  valuable? 

CDC [MR.  COOMBS]:  Potentially.  And  —  but  see  then  if  it  did, 

then  you  would  see,  as  in  all  the  641  cases  that  did  charge 
information,  you  would  see  a  charge  of  that  information;  as  a  thing 
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1  of  value. 

2  M J:  And  which  cases  should  I  be  looking  at? 

3  CDC [MR .  COOMBS]:  The  Court  should  be  looking  specifically  at 

4  Jeter,  Jordan  and  Hubbard  for  copying  information.  And  the  Court 

5  should  also  look,  just  as  persuasive  authority  on  this  issue  DiGilio, 

6  because  in  DiGilio  they  charged  copies.  And  —  and  the  Court 

7  indicated  there  that  obviously  they  did  not  charge  theft  of 

8  information  because  they  would  have  charged  that  information  under  a 

9  thing  of  value.  And  the  government  gets  up  and  says,  well,  you  know 

10  what,  we  did  —  we  included  those  magic  words.  We  included  thing  of 

11  value.  And  from  that  you  should  have  interpreted  what  we  meant  was 

12  information.  But  that's  not  the  case  because  under  the  defense's 

13  view  of  it,  when  they  charge  database,  that  could  be  the  thing  of 

14  value  that  they  were  alleging.  In  fact,  it  was  because  when  you  look 

15  at  the  thing  of  value,  what  follows  immediately  thereafter  the  "to 

16  wit"  is  what  they  named,  and  that's  the  database. 

17  MJ:  Well,  they  say  "a  record  or  thing  of  value."  So  it's  the 

18  defense's  position  that  means  a  database? 

19  CDC [MR.  COOMBS]:  Right,  because  that's  what  —  that's  all 

20  that's  in  the  —  the  specification.  And  when  you  think  about  it  for 

21  a  moment,  if  that  really  was  the  government's  position  --  and  so  many 

22  times  the  government  gets  up  and  says,  no,  there's  no  case  law  that 

23  supports  what  we  are  saying  —  or,  you  know,  no  one  has  considered 
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this  before;  and  this  is  yet  another  example  of  that.  But  this  is 
Trial  Counsel  101  of  like  when  you  draft  the  charge  sheet,  and  you 
lay  out  the  elements,  you  charge  what  you  intend  to  prove.  And  how 
far - 

MJ:  Well,  what's  —  go  ahead. 

CDC [MR .  COOMBS]:  -  I'm  just  going  to  say,  how  hard  would 

it  have  been  then  if  --  if  we  take  them  at  face  value  --  that  thing 
of  value  --  when  they  were  doing  that  --  when  they  are  looked  at  it, 
they  interpreted  that  to  mean  information?  It  would  have  been  so 
easy,  especially  copying  the  examples  of  other  641  cases  then,  to  lay 
out  copies  of  records  from  the  CIDNE-A  database  and  the  information 
contained  therein.  That  would  be  notice  pleading.  That  would  be 
pleading  the  information;  the  thing  of  value. 

MJ:  What  is  your  position  with  respect  to  the  government's 

position  that  basically  information  is  inherent  in  a  --  in  a  record? 

CDC [MR.  COOMBS]:  It  —  but  it's  not.  And  I  guess  the  - 

MJ:  Or  a  photo  or  a  map  or  - 

CDC [MR.  COOMBS]:  Yeah.  It's  not  inherent,  for  sure,  but  the 

—  the  key  thing  is  we're  dealing  with  641.  So  when  you  incorporate 
641  under  134,  you  take  with  it  the  case  law.  And  if  that  were  the 
case  —  if  information  were  inherent,  the  government's  position  were 
correct  that,  you  know,  it's  the  defense  that  is  just  not  --  is 
clueless  and  not  understanding  the  specification,  you  wouldn't  have 
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all  these  cases  that  lay  out  the  difference  between  copies  and 
information.  You  wouldn't  have  DiGilio  saying,  well,  obviously  the 
government  didn't  charge  information  because  they  —  they  didn't 
allege  it.  And  you  wouldn't  have  this  issue  of  does  information  fall 
under  641  because  there  would  be  no  dispute,  if  that  were  the  idea 
that's  inherent  in  the  record,  because  people  would  saw,  well, 
clearly  records  fall  under  641;  it's  named  in  641.  So  there's  no 
dispute.  You  wouldn't  even  be  arguing  the  issue  of  information,  but 
you  do.  And  we  have.  And  it's  clear  when  you  look  at  case  law,  there 
is  a  difference.  And  so  looking  at  the  GAL;  the  GAL  is  identical  as 
far  as  the  argument  because  the  government  charged  the  USFI  GAL. 
That's  what  they  specifically  charged.  And  they  failed  —  first  of 
all,  he  did  steal  the  USFI  GAL.  And  that's  how  they  actually  pled 
it;  the  USFI  GAL.  And  they  went  about  trying  to  prove  it  in  that 
manner,  too,  the  cost  of  creating  the  GAL.  But  that  GAL  has  never 
taken  from  the  government's  possession.  At  best,  you  have  .mil 
addresses  that  were  taken.  But  they  didn't  induce  any  evidence  to 
suggest  that  the  .mil  addresses  that  were  found  on  PFC  Manning's 
computer  were,  in  fact,  the  USFI  GAL;  no  one  said  that.  In  fact, 
just  the  opposite;  the  government's  witness.  Chief  Nixon,  who 
testified  on  two  different  occasions  —  the  first  time  he  testified 
he  said  that  the  USFI  GAL  contained  160,000  email  addresses.  And  we 
know  that  from  the  evidence  that  160,000  email  addresses  were  never 
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on  PFC  Manning's  personal  computer.  Then  when  he  got  up  again  —  the 
second  time  he  testified,  he  said  that  he  viewed  the  —  .mil 
addresses  and  he  did  not  believe  that  it  was  the  USFI  GAL;  that,  if 
anything,  it  might  have  been  Division  GAL.  And  that  was  his 
testimony. 

MJ:  Wouldn't  it  be  a  lesser  included  offense? 

CDC[MR.  COOMBS]:  Well,  the  --  the  question  then  would  be  -- 

and  that  would  be  appropriate  if  we  could  show  the  Division  GAL  would 
be  fall  —  would  fall  under  the  USFI  GAL. 

MJ:  Wasn't  there  testimony  to  that  effect? 

CDC [MR .  COOMBS]:  I  don't  believe  so,  ma'am.  I  believe  what 

he  said  was  each  echelon  had  its  own  GAL  for,  you  know,  lack  of  a 
better  word,  I  guess,  and  the  Division  GAL  didn't  necessarily  — 
wouldn't  necessarily  fall  under  the  USFI  GAL.  It  could.  But  it  -- 
there's  no  evidence  to  suggest  that  it  did. 

MJ:  I  thought  the  evidence  was  it  went  from  the  bottom  up. 

CDC [MR.  COOMBS]:  The  evidence  was  that  each  —  each  person 

might  —  you  might  have  a  brigade,  you  might  have  a  Division,  you 
might  have  a,  in  this  case,  USFI,  but  there's  no  evidence  that  the 
USFI  GAL  incorporated  all  of  everything  beneath  it.  All  that's  been 
testified  to  is  that  there's  a  —  there's  a  difference  between  these 
things,  and  one  of  the  things  is  the  Division  GAL. 

And  so  now  you  have  an  identity  of  property  issue.  And 
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this  goes  to  the  Wilkins  case,  this  goes  to  the  Marshall  case;  it's 
important  what  you  plead.  And  you  pled  the  USFI  GAL,  so  you  need  to 
prove  the  USFI  GAL.  And  they  haven't  done  that.  They  haven't  done 
that  not  only  from  the  standpoint  of  taking,  but  they  haven't  done 
that  from  the  standpoint  of  value.  And  the  reason  why  I  wanted  to 
address  the  GAL  separately  is,  entertaining  the  government's  argument 
—  let's  entertain  —  let's  say  the  Division  GAL  is  really  what  they 
should  have  pled  —  or  maybe  they'll  argue,  well,  no,  no,  it's  a  part 
of  the  USFI  GAL.  So  it's  not  the  entire  USFI  GAL,  but  it's  a  part, 
and  that's  what  —  you  know,  that's  what  we  were  —  we're  pleading. 
Well,  we've  had  no  evidence  that  the  taking  was  wrongful.  Absolutely 
no  evidence  to  that.  In  fact,  every  bit  of  evidence  has  been  to  the 
contrary.  The  —  the  testimony  from  Rouillard  —  testified  that 
there  was  no  rule  —  directive  stating  that  Soldiers  were  not 
permitted  to  access  or  download  .mil  addresses  from  the  GAL. 
Similarly,  Chief  Balonek  testified  that  there  was  no  prohibition 
against  downloading  .mil  addresses  from  any  GAL.  And  the  Stipulation 
of  Expected  Testimony  from  Special  Agent  Williamson  stated  that  the 
DoD  warning  banner  and  legal  notice  did  not  explicitly  prohibit  the 
downloading  of  email  addresses.  I  am  unaware  of  any  restriction  or 
guidance  that  precludes  one  from  downloading  emails  addresses  from 
Outlook.  So  even  viewing  in  the  light  most  favorably  to  the 
government  and  all  reasonable  inferences,  they  haven't  proven  that 
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the  taking  —  if  there  was  a  taking,  was,  in  fact,  wrongful.  And  we 
gave  the  example  of  this  would  be  no  different  than  as  a  Judge 
Advocate,  if  I  decided,  you  know,  I  can  —  I  can  go  on  our  kind  of 
global  address  list.  I  can  pull  every  email  address  for  every  Judge 
Advocate.  And  maybe  I  want  to  do  that.  And  I  want  to  put  it  on  my 
computer.  Have  I  then  committed  a  wrongful  taking  or  a  larceny  or  a 
641  offense  if  I  do  that? 

MJ:  Well,  what's  the  defense's  position?  I  mean,  there's  also 

been  testimony  and  evidence  that  this  came  at  the  end  in  May  of  2010. 
So  there's  been  evidence  of  a  pattern  of  sending  —  taking  things 
from  the  government  computers  and  sending  them  to  WikiLeaks  along  the 
way,  along  with  a  Tweet.  So  you  have  all  this  happening  at  the  end 
that  could  create  an  influence  of  wrongfulness.  Now  the  fact  that 
these  addresses  are  on  his  computer,  assuming  that  that  is  the  case, 
what  is  the  defense's  position  on  whether  a  larceny  has  been  proven 
or  anything  else? 

CDC [MR.  COOMBS]:  Yeah.  I  think  it  goes  back  to  —  I  believe 

it  was  Rouillard,  or  might  have  been  Nixon  that  said,  well,  you  know, 
yeah,  there's  no  prohibition  on  downloading  these  emails  addresses. 

I  mean  —  you  could  do  it  —  not  a  problem,  but  I  guess  it  —  it  was 
a  matter  of  your  intent.  I  think  one  of  them  said  it  would  matter  on 
the  intent.  And  so,  I  guess,  in  his  mind  at  least,  if  you  had  a  bad 
intent,  maybe  that  would  be  wrongful,  and  if  you  just  wanted 
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1  information,  it  wouldn't  necessarily  be  wrongful. 

2  And  so  let's  look  at  the  evidence  that  we  have.  You  know, 

3  the  government's  offered  this  Tweet  saying  want  as  many  .mil 

4  addresses.  Well,  the  .mil  addresses  that  —  once  PFC  Manning  did  his 

5  research  on  the  GAL,  and  see  if  he  could  export  some  of  the  email 

6  addresses,  what  we  have  information  on  is  there  was  —  those  emails 

7  addresses  were  left  on  this  --  the  supply  room  computer,  and  there 

8  were  email  addresses  in  the  unallocated  space  of  PFC  Manning's 

9  personal  computer.  His  personal  computer  was  not  wiped  or  cleaned  or 

10  anything  at  all  at  that  point.  The  forensic  evidence  shows 

11  absolutely  no  attempt  to  transfer  that  to  anyone  —  give  it  to 

12  anyone.  There's  been  no  evidence  that  there  has  been  any  sort  of 

13  unlawful  transfer  of  that  to  a  person  not  entitled  to  receive  it. 

14  And  so  the  —  the  mere  possession  of  it,  much  like  with  me,  if  I 

15  wanted  to  pull  down  .mil  addresses  for  Judge  Advocates,  in  of  itself, 

16  according  to  all  the  testimony,  is  not  wrongful.  It  would  become 

17  wrongful,  if  at  all,  if  you  could  show  an  unlawful  transfer  of  it. 

18  And  the  government  hasn't  done  that.  There's  been  no  evidence 

19  regarding  that.  So  the  defense's  position  would  be  that  even  looking 

20  at  the  evidence  related  to  the  Tweet  and  the  research,  if  you're 

21  going  to  do  as  inference,  another  inference  that  would  be  just  as 

22  likely  based  upon  looking  at  it,  is  you  got  a  guy  who  everyone  has 

23  testified  is  very  computer  knowledgeable  —  probably  the  most 
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knowledgeable  person  on  computers  that  they've  ever  seen.  And  he's 
now  removed  from  his  job  in  the  T-SCIF  where  every  day  he  was  doing 
things  for  —  as  part  of  his  job  as  an  analyst,  and  he's  in  the 
supply  room.  And  the  testimony  was,  you  know,  he's  in  this  supply 
room  not  really  doing  anything.  So  you've  got  a  person  there  who 
researches  can  I  do  something.  And  then  what  evidence  do  we  have, 
you  know,  he  does  it  so  he  can  show  that  he  can  do  it,  save  it  on  the 
supply  room  computer,  has  it  on  his  personal  computer,  but  then  it's 
deleted.  And  you  can  guarantee  that  the  government  searched  that 
computer  —  and,  again,  it  was  not  wiped  —  the  government  searched 
that  computer  —  if  there  was  an  actual  —  any  evidence  to  show  that 
it  was  transferred  —  and  they  have  evidence  of  transfers  for 
everything  else  with  the  exception  of  things  that  occurred  prior  to 
the  time  that  one  thing  —  the  Farrah  video  that  they're  alleging 
occurred  in  2009,  that  you  would  see  that.  And  so  absent  some 
evidence  to  show  that  PFC  Manning  did  something  with  that  that  would 
qualify  as  wrongful,  then  really  all  we  have  is  government's  own 
witnesses  saying  that  there's  nothing  wrong  with  downloading  and 
saving  this  information. 

MJ:  Do  you  have  an  attempt? 

CDC [MR .  COOMBS]:  There  again,  I  think  you  would  have  to  have 

some  evidence  to  show  the  —  the  intent  to  give  this  to  somebody  in 
order  for  it  to  be  wrongful,  again.  And  —  and  there  I  guess  the  — 
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1  the  wrongfulness  of  this  would  be  if  we  said  that  because  of  this 

2  property  —  and  you  have  it,  you  can't  share  it  with  anyone  else.  I 

3  don't  --  the  government  hasn't  offered  anything  of  that  except  for 

4  one  witness  who  said,  you  know  what,  in  my  mind,  nothing  wrongful 

5  with  having  it;  but  if  you  have  a  bad  intent,  maybe  then  it  would  be 

6  wrongful.  That's  the  extent  of  the  evidence  we  have. 

7  MJ:  Well,  you  have  regulations  that  have  been  judicially 

8  noticed  as  well. 

9  CDC [MR.  COOMBS]:  Right.  And  —  and  in  those  regulations 

10  there's  nothing  in  there  that  talks  about  transferring  .mil  addresses 

11  to  anyone.  The  —  the  government's  position  on  this  is  that  it 

12  becomes  wrongful  —  and  they  tried  initially  to  say  because  it's 

13  spearfishing  or  whatnot  for  value  —  and  that  goes  to  the  next 

14  problem  that  the  government  has  of  valuation.  There's  been  no 

15  evidence  to  —  legitimate  evidence  to  value  what  actually  was 

16  allegedly  taken  in  this  case.  And  that  would  be  the  copy  of  the  .mil 

17  addresses.  Again,  the  government  goes  back  to  the  database.  They 

18  want  to  somehow  bootstrap  in  the  overall  value  of  creating  the  GAL, 

19  and  —  and  then  say,  well,  these  are  .mil  addresses  within  there,  so 

20  we  can  extrapolate  from  the  millions  of  dollars  spent  on  servers, 

21  virtual  servers,  man-hours  and  whatnot,  that  somehow  these  .mil 

22  addresses  must  have  a  value  more  than  a  thousand.  And  this  is  lot 

23  like  the  Wilson  case  where  there's  been  no  real  evidence  on  the 
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1  value.  And  you  have  100  rifles,  and  they  only  need  to  be  worth  a 

2  $1.39  a  piece  in  order  to  get  over  the  --  at  that  time  the  $100.00 

3  threshold,  and  yet  the  government  hasn't  offered  any  evidence  other 

4  than  to  say  - 

5  MJ:  What  about  Mr.  Lewis'  testimony? 

6  CDC [MR.  COOMBS]:  Yeah,  and  Mr.  Lewis'  testimony  —  the 

7  defense's  position  on  Mr.  Lewis'  testimony  is  that  —  and  I  go  —  I 

8  know  for  the  917  you  don't  judge  the  credibility  issues,  but  Mr. 

9  Lewis'  testimony  on  the  value  of  the  information  would  be,  in  the 

10  defense's  position,  much  like  U.S.  v.  Horning.  And  in  U.S.  v. 

11  Horning - 

12  MJ:  Has  that  case  been  cited  in  your  brief? 

13  CDC [MR.  COOMBS]:  It  has,  Your  Honor. 

14  MJ:  Okay. 

15  CDC [MR.  COOMBS]:  And  U.S.  v.  Horning  the  —  the  government 

16  brought  a  —  a  person  that  had  a  book  on  tools;  it  was  basically  a 

17  value  of  tools.  And  they  tried  to  prove  it  both  how  the  pawn  shop 

18  would  give  certain  amount  of  money  for  the  tools,  and  then  also  on 

19  the  —  a  person  coming  in  and  testifying  from  a  government  book  as  to 

20  the  cost  of  particular  tools.  And  in  Horning  there  was  a  motion  to 

21  strike  that  testimony  because  the  person  was  not  a  valuation  expert; 

22  was  not  somebody  who  could  ascribe  a  —  appropriate  value.  And, 

23  again,  for  the  917  purposes,  we  did  make  a  motion  to  strike.  We'd 
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renew  that  for  the  917  purposes,  and  we'd  that  Mr.  Lewis,  himself, 
did  not  consider  himself  a  valuation  expert.  It  wasn't  until  a  week 
before  he  testified  that  that  he  even  knew  what  he  was  testifying 
about.  And  so  from  the  defense's  position  there's  been  no  evidence 
on  valuation  of  what  was  taken.  And  that  would  be,  again,  a  copy  of 
the  email  addresses.  So  the  cost  of  production  would  be  the  value 
there.  The  fees  market  that  Mr.  Lewis  gave  some  evidence  on  —  that 
would  be  if  there  was  evidence  of  —  of  that  being  given  to  somebody, 
and  then  you  would  have  both,  maybe,  the  wrongful  and  then  you  could 
say,  okay,  well,  that  was  given  to  somebody  and  let's  prove  the  value 
of  it.  What  Mr.  Lewis  didn't  talk  about,  but  what  is  clear  even  from 
the  testimony,  is  that  these  email  addresses  are  at  best  were  —  or 
best  last  a  year.  We  heard  from  Nixon,  that  as  soon  as  soon  somebody 
leaves,  they  —  they  pull  those  email  addresses  off.  So  the  .mil 
addresses  that  the  Tweet  would  be  asking  for,  if  —  if  there  was  some 
sort  of  need  for  this  for  SPAM  or  for  some  other  unlawful  purpose, 
you  wouldn't  be  asking  for  .mil  addresses  that  are  going  to  expire 
within  a  year  for  sure,  and  more  than  likely  the  majority  of  the 
emails  addresses  expiring  much  sooner  than  that  because  of  how  people 
come  in  and  out  of  theater.  So  these  are  not  the  .mil  addresses.  So 
when  the  Court's  looking  for  evidence  of  maybe  intent  to  take,  well, 
the  .mil  addresses,  if  you  really  wanted  to  take  .mil  addresses  that 
were  of  any  value,  he  would  go  toward  the  U.S.  Army  .mil  addresses. 
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He  wouldn't  go  towards  just  the  deployed  addresses. 

MJ:  Tweet  wanted  the  GAL,  right? 

CDC [MR.  COOMBS]:  They  did  not. 

MJ:  They  wanted  .mil  addresses. 

CDC [MR.  COOMBS]:  It  —  .mil  addresses.  Yes,  Your  Honor. 

MJ:  I'm  sorry.  Okay. 

CDC [MR.  COOMBS]:  So  you  would  go  towards  a,  you  know,  .mil 

addresses  that  actually  have  some  value,  because  all  of  these  emails 
addresses  will  expire  within  a  year,  for  sure.  And  many  of  them  much 
sooner  than  that,  because  of  when  the  people  come  in.  So  even 
looking  at  the  valuation,  Mr.  Lewis  did  not  value  email  addresses 
that  expire  within  a  year  —  the  deployed  email  addresses.  And  so 
the  defense's  position  is,  not  only  have  they  charged  the  wrong 
thing,  not  only  have  they  failed  to  prove  that  it  was  wrongful,  but 
they  have  also  not  proven  valuation.  So  subject  to  your  questions, 
ma'am. 

MJ:  I  think  I  have  asked  them.  Thank  you. 

CDC [MR.  COOMBS]:  Thank  you,  ma'am. 

MJ:  So  what  are  the  three  things;  not  proved  MFN  —  not  proved 

CDC [MR.  COOMBS]:  So  they  haven't  proved  that  --  the  right 

thing;  they  charged  USFI  GAL.  And,  if  anything,  what  we  have  from 
the  testimony  it's  the  Division  GAL.  And  there's  no  testimony  to 
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1  suggest  the  Division  GAL  was  part  of  the  USFI  GAL.  Then  they  --  they 

2  have  not  proven  the  actual  wrongfulness,  if  there  is,  you  know,  from 

3  the  standpoint  of  taking  it,  if  he  did,  in  fact,  take  say  the 

4  Division  GAL  or  a  portion  of  the  USFI  GAL,  they  haven't  proven  that 

5  was  wrong.  All  their  evidence  is  to  the  contrary.  And  then,  finally, 

6  they  haven't  proven  value  of  the  item  that  was  actually  taken. 

7  MJ:  All  right.  Thank  you. 

8  CDC [MR .  COOMBS]:  Thank  you,  ma'am. 

9  MJ:  Captain  von  Elten? 

10  ATC [CPT  von  ELTEN]:  Ma'am,  if  I  may  begin  by  answering  your 

11  question  you  asked  me  last.  The  United  States  would  differentiate 

12  between  publications  made  for  public  consumption  and  publications 

13  made  for  the  exclusive  use  of  United  States  government,  and  would 

14  offer  that  in  those  cases  it's  more  appropriate  to  include  all  the 

15  cost  of  productions  where  something  is  made  pretty  exclusive  use  of 

16  the  United  States  government. 

17  MJ:  Why? 

18  ATC [CPT  von  ELTEN]:  Because  if  it's  photocopying,  all  those  — 

19  all  the  equipment  that  goes  into  photocopying  is  —  like  the  sole 

20  purpose  of  creating  that  copy  is  just  to  —  just  to  disseminate  it. 

21  But  in  this  case  where  information  is  created  exclusive  —  records 

22  are  created  exclusively  for  the  United  States  government,  all  that 

23  work  that  goes  into  it  also  goes  into  it,  also  goes  into  containing 
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it  and  to  limiting  the  scope  of  people  who  have  access  to  it. 

MJ:  Wouldn't  that  be  true  in  the  NCIC  case,  too,  that  was 
talked  about? 

ATC [CPT  von  ELTEN] :  Which  case  again  was  that,  ma'am? 

MJ:  The  NCIC  information  for  the  voter  fraud.  I  don't  remember 

the  name  of  the  case.  But  - 

ATC [CPT  von  ELTEN]:  I'll  have  to  go  back  to  you  on  that  case. 

CDC [MR .  COOMBS]:  That's  the  Jordan  case.  Your  Honor. 

MJ:  All  right.  In  Jordan,  the  accused  converted  the  NCIC 

records  to  his  own  use.  So  you're  saying  anytime  the  government 
creates  information  for  itself,  you  value  the  entire  system  that 
creates  it? 

ATC[CPT  von  ELTEN]:  I'm  saying  that's  some  evidence  of  it. 

MJ:  What's  your  case  —  what's  your  authority  to  do  that? 

ATC [CPT  von  ELTEN]:  For  the  exclusive  use? 

MJ:  No. 

ATC [CPT  von  ELTEN]:  For  - 

MJ:  For  the  cost  of  production  equipment  and  maintenance  of 

records  in  a  database,  what  is  —  what  other  —  any  other  case  law 
use  that  valuation? 

ATC [CPT  von  ELTEN]:  Not  other  than  has  been  cited  before  the 
Court . 

MJ:  Okay,  and  that  would  be  once  again? 
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1  ATC [CPT  von  ELTEN] :  Zettl  and  May  and  things  like  that  - 

2  MJ:  Zettl  - 

3  ATC [CPT  von  ELTEN]:  -  that  talk  about  - 

4  MJ:  - okay. 

5  ATC [CPT  von  ELTEN]:  -  all  the  things  that  go  and  support  it. 

6  And,  again,  the  distinction  between  —  these  aren't  copies,  these  are 

7  records  created  from  those  systems.  And  it's  the  systems  that  create 

8  —  create  the  record  that  go  to  its  valuation.  So  if  a  photocopy  is 

9  made  in  the  photocopy  machine;  if  it's  an  electronic  record,  the 

10  infrastructure  supporting  them. 

11  MJ:  Well,  talk  to  me  about  that.  The  --  is  there  any  authority 

12  --  oh,  you  cited  Morris  —  but  is  there  any  authority  that  digital 

13  copies  are  not  copies  of  records? 

14  ATC [CPT  von  ELTEN]:  Ma'am,  the  United  States  would  have  to  do  — 

15  conduct  additional  research  into  —  into  that.  I  have  —  I've  only 

16  looked  - 

17  MJ:  Well,  what's  the  United  States  position  with  respect  to  the 

18  defense  position  that  every  case  that  has  charged  violation  of  copies 

19  has  said  copies? 

20  ATC [CPT  von  ELTEN]:  First,  the  Bottone  case  did  not.  It  called 

21  --  it  charged  documents  when  they  were  copies.  And  so  that's  not  the 

22  —  an  accurate  reflection.  Second,  the  United  States'  position  is 

23  that  a  lot  of  those  cases  - 
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MJ:  What  did  Bottone  charge? 

ATC[CPT  von  ELTEN] :  It  charged  documents  related  to  cultures. 

MJ:  The  copies  were  - 

ATC [CPT  von  ELTEN]:  And  they  were  —  and  unlike  in  this  case, 
the  copies  were  created  by  the  defendants  using  their  own  property  -- 
like  the  defendant's  own  photocopy  machine,  which  is  even  farther 
astray  than  here  where  the  —  all  the  copies  were  made  using  the 
United  States  government  property. 

MJ:  So  it's  the  government's  position  then  that  the  copying  is 

method  of  stealing? 

ATC [CPT  von  ELTEN]:  It's  part  of  the  transaction.  By  copying  — 
by  copying  the  records  —  by  creating  the  records,  that  the  - 

MJ:  Well,  the  defense's  position  is  the  original  records  never 

moved.  So  a  copy  was  created.  What  is  the  government's  response  to 
that? 

ATC [CPT  von  ELTEN]:  Yes.  And  that  copy's  created  using  this 
infrastructure  and  then  that  copy  was  stolen.  And  that  —  that  copy 
is  the  United  States  record.  And  that  record  was  created  with  all 
the  computer  --  computer  infrastructure  supporting  every  -- 
supporting  the  database.  And  that  —  but  for  all  that  infrastructure 
the  copy  couldn't  be  created.  Essentially  the  infrastructure  becomes 
the  photocopy  machine  in  that  case. 

MJ:  Well,  there  —  if  you're  looking  at  the  structure  of  your 
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charge,  that  they  steal,  purloin,  or  knowingly  convert  to  you  use  — 
his  use  or  the  use  of  another,  a  record  or  thing  of  value  of  the 
United  States  or  of  a  department  or  agency  thereof,  to  wit, 
Specification  4,  the  Combined  Information  Data  Network  Exchange-Iraq 
database  containing  more  than  380,000  records.  Now  the  defense's 
brief  and  position  is,  hey,  he  went  in  --  he  took  a  copy  of  it.  He 
never  took  the  original. 

ATC [CPT  von  ELTEN] :  The  United  States'  position  would  also  be 
that  that  could  also  be  read  to  say  that  there  are  380,000  records 
from  the  CIDNE  database. 

MJ:  And  they  all  remained  in  the  CIDNE  database  after  PFC  - 

ATC [CPT  von  ELTEN]:  Not  the  copies  that  were  transported  though, 
ma ’ am . 

MJ:  I  mean,  that's  my  point.  Does  the  —  the  defense  is  saying 

you  didn't  charge  copies,  you  charged  originals.  What's  the 
government's  position  on  that? 

ATC [CPT  von  ELTEN]:  Because  they're  electronic  the  distinction 
is  —  is  —  is  rather  fine. 

MJ:  Why? 

ATC [CPT  von  ELTEN]:  Because  they  can  co-exist  in  different 
places  simultaneously  because  it's  electronic.  It's  not  a  paper 
document  that  can  only  exist  at  one  place  and  one  time  till  it's 
created.  Because  it's  digital,  that  —  it's  a  different  —  that  the 
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paper  cases  are  different.  And  that  goes  to  defense's  use  of 
DiGilio,  and  the  other  cases  where  they  talk  about  —  or  Friedman, 
where  they  talk  about  photocopies.  But,  again,  those  are  —  those 
are  things  that  exist  in  one  place  at  one  time.  And  —  in  Friedman, 
they  charge  carbon  paper  because  that  was  the  method  of  transmission. 
The  carbon  —  the  —  in  Friedman  the  defendants  took  carbon  paper  and 
created  grand  jury  transcripts  from  those.  And  that  was  ultimately 
what  was  converted  was  the  information  —  the  contents  of  the  grand 
jury  transcripts.  And  the  source  was  the  carbon  paper  they  provided 
notice  to  the  source  and  the  method  of  transmission,  which  is  the 
same  as  in  this  case. 

MJ:  And  what  case  is  that? 

ATC [CPT  von  ELTEN] :  Friedman ;  a  9th  Circuit  case,  ma'am.  I  can 
get  you  a  copy. 

MJ:  I  have  it,  I  believe.  I  have  it.  Are  there  any  other  -- 

is  there  any  other  case  law  that  makes  this  distinction  between 
digital  copy  and  hard  copy? 

ATC [CPT  von  ELTEN]:  No,  ma'am. 

MJ:  What's  the  government's  position  then?  Is  it  required  to 

charge  copy  and/or  information,  or  is  —  why  is  the  charge  as  is 
sufficiently  --  legally  sufficient. 

ATC [CPT  von  ELTEN]:  The  charge  is  sufficient  because  it  puts  the 
accused  on  notice  of  exactly  what  property  was  taken,  the  source  of 


10524 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


G 


O 


it,  and  how  it  was  taken  because  of  the  electronic  nature. 

MJ:  What's  the  government's  position  on  --  is  it  required  that 

the  --  when  someone  steals,  purloins,  or  knowingly  converts,  that  the 
United  States  has  lost  the  use  and  benefit  of  the  property? 

ATC [CPT  von  ELTEN] :  No,  Ma'am. 

MJ:  For  both  a  theft  and/or  —  a  stealing  and  a  conversion,  or 

are  —  is  the  standard  different? 

ATC [CPT  von  ELTEN]:  Is  the  standard  different  for  charging 
decisions,  ma'am? 

MJ:  No,  no.  For  proof. 

ATC [CPT  von  ELTEN]:  The  proof  is  different  for  conversion. 

Where  evidence  of  a  theft  occurs,  that  also  is  evidence  of 
conversion.  Where  the  issue  is  being  --  where  it's  being  charged 
just  for  substantial  interference,  the  notice  of  the  property  —  the 
property  rights  interfered  with  —  the  property  itself  has  to  be 
identified;  the  specific  rights  do  not  need  to  be  enunciated  in  the 
charge  sheet . 

MJ:  All  right,  but  the  government  does  agree  then,  at  least  in 

accordance  with  the  Court's  instruction,  that  for  a  conversion,  the 
misuse  must  have  seriously  and  substantially  interfered  with  U.S. 
government's  property  rights? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am.  Furthermore,  for  valuation 
purposes  —  in  the  Hood  case  in  the  military  jurisprudence,  the 
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electronic  property  at  issue  —  although  those  were  electronics,  like 
TVs  and  whatnot,  where  the  inherent  qualities  were  used  for  valuation 
there  would  be  most  analogous  to  --  to  this  case  --  and  --  thou  -- 
market  valuation  of  them. 

Ma'am,  defense  talked  a  little  bit  about  the  GAL.  The 
United  States  would  just  like  to  clarify  a  few  things.  Special  Agent 
Johnson  testified  that  excerpts  of  thousands  of  emails  were  located 
on  PFC  Manning's  personal  computer.  And  that  personal  computer  is 
evidence  of  transfer.  That  transfer  was  from  the  exclusive 
possession  of  United  States  government  outside  of  that  to  PFC 
Manning's  personal  possession.  And  at  that  point,  given  that 
transfer,  the  theft  is  complete.  Defense  also  - 

MJ:  Whoa,  whoa,  whoa.  I  hear  you  with  the  classified 

information;  the  GAL's  not  classified. 

ATC [CPT  von  ELTEN] :  No,  ma'am. 

MJ:  And  the  evidence  has  shown  that  --  the  testimony  we  have  is 

that  there  was  no  prohibition  on  downloading  the  GAL  to  your  personal 
computer  or  anything  else.  So  why  is  the  theft  complete  if  it's  on 
his  computer? 

ATC [CPT  von  ELTEN]:  Chief  Nixon  talked  about  —  testified  about 
the  access  a  user  had.  He  differentiated  between  visibility  and 
access;  and  he  said  users  had  visibility.  And  he  testified  that 
visibility  meant  that  you  could  go  onto  your  computer  and  you  could 
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populate  the  list  —  you  could  see  it,  but  he  also  testified  you 
didn't  have  access  to  export  that  ability  —  to  export  that 
information.  You  didn't  have  the  ability  to  take  it  and  --  take  it 
for  your  personal  use.  He  also  testified  that  - 

MJ:  Wait  a  minute,  he  —  you  mean  as  a  matter  of  policy  or  as  a 
matter  of  ability? 

ATC [CPT  von  ELTEN] :  As  a  matter  of  ability. 

MJ:  So  Nixon's  test  --  Chief  Nixon's  testimony  was  you  would 
have  to  do  some  sort  of  manipulation  of  computer  to  actually  do  this? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am.  And  the  evidence  supports  that 
as  well.  As  defense  just  noted,  PFC  Manning  conducted  research  on 
how  to  defeat  these  mechanisms  so  that  he  could,  as  he  put  it  in  his 
tasker,  exfiltrate  the  GAL. 

MJ:  So  tell  me  about  this  —  as  Chief  Nixon  says  that  you  can't 

download  .mil  addresses? 

ATC [CPT  von  ELTEN]:  Yes.  He  talks  about  the  difference  between 
access  and  visibility.  And  he  says  a  user  has  visibility.  A  user 
can  go  onto  a  computer  and  see  a  —  you  know,  and  see  the  list  as  it 
gets  populated  by  the  various  mechanisms  from  that  organization 
level.  But  he  testified  he  didn't  have  the  access.  He  said  you 
could  cut  and  paste  it,  but  that  would  be  —  you  could  physically  cut 
and  paste  it,  but  that  would  be  a  tedious  and  ineffective  process, 
akin  to  using  Wget  bypassing  the  mechanisms.  And  then  PFC  Manning 
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conducted  research  to  do  that,  and  so  he  could  exfiltrate  it  to  his 
personal  computer. 

MJ:  Was  there  any  policy  that  said  —  or  anything  that  was 

brought  out  in  the  government's  case  in  chief  that  said  that  users 
could  not  download  the  GAL  or  portions  of  the  GAL  to  their  personal 
computer? 

ATC [CPT  von  ELTEN] :  One  second,  ma'am. 

[Pause] 

ATC [CPT  von  ELTEN]:  Ma'am,  Chief  Rouillard  testified  about  the 
importance  of  keeping  that  information  safe  and  the  potential 
malicious  uses  for  that.  Furthermore,  when  the  —  the  test  - 

MJ:  Well,  that's  not  what  I  asked.  I  asked  is  there  any 

prohibition  on  someone  downloading  .mil  addresses  to  their  personal 
computer?  There  is  for  classified  information;  I  understand  that, 
but  for  the  GAL? 

ATC [CPT  von  ELTEN]:  All  the  testimony  talked  about  the 
acceptable  use  being  —  taking  emails  and  placing  them  within  your 
NIPR  or  your  government  computer.  There  was  no  testimony  saying  it 
was  —  that  I'm  aware  that  said  it  was  permissible  to  take  email 
addresses  and  place  them  on  your  personal  computer. 

MJ:  Well,  the  government's  got  the  burden  of  proof  here.  Is 

any  testimony  that  it's  impermissible  to  put  it  on  your  personal 
computer  —  or  evidence? 
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ATC [CPT  von  ELTEN] :  Your  Honor,  it  would  be  —  Your  Honor,  the 
evidence  would  be  that  it's  not  in  accordance  with  Army  policy  such 
as  25-2,  that  —  where  information  is  supposed  to  be  —  information 
assurance  dictates  that's  supposed  to  be  not  misused;  that  it's 
supposed  to  be  used  for  appropriate  uses  would  be  some  evidence  of 
that . 

MJ:  Well,  government,  - 

ATC [CPT  von  ELTEN]:  And,  also,  that  - 

MJ:  - go  ahead. 

ATC [CPT  von  ELTEN]:  -  that  testimony  was  also  about  the  - 

specifically  that  PII  should  not  be  compromised  or  widely 
disseminated.  And  PII,  especially  of  Soldiers  should  be  protected. 

MJ:  All  right,  government,  by  close  of  business  tomorrow,  you 
find  me  what  the  record  says  or  that  --  what  has  been  in  the 
government's  case  in  chief,  presented  as  evidence,  that  there  is  some 
sort  of  policy  or  prohibition  that  people  cannot  take  —  download  the 
GAL  onto  their  personal  computers. 

ATC [CPT  von  ELTEN]:  Yes,  ma'am. 

MJ:  Or  .mil  addresses. 

ATC [CPT  von  ELTEN]:  Also,  ma'am.  Chief  Nixon  testified  that  the 
user  names  remain  the  same.  So  while  the  entire  email  address  might 
change  after  a  year  when  someone  redeployed,  the  domain  —  the  domain 
part  would  change,  but  the  user  name  would  remain  the  same  as  Chief 
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Rouillard  testified  and  Chief  —  that  the  user  name  is  valuable 
information  and  subject  to  misuse. 

Finally,  the  defense  cites  the  Horning  case,  which  is  also 
not  on  point  in  this  case.  In  Horning  the  issue  was  the  government 
only  presented  evidence  that  the  properties  were  $50.00  not  the 
statutory  minimum  of  $100.00.  And  the  fact-finder  was  not  allowed  to 
infer,  without  additional  information,  that  the  $50.00  value  was  too 
low.  So  in  that  case,  the  government  presented  evidence  that  the 
pawnbroker  paid  $50.00  for  it,  and  then  argued  that  everybody  knows 
pawnbrokers  underpay  for  things  and  they're  worth  more  than  the  pay. 
So  the  government  didn't  present  evidence  how  much  more  somebody 
would  pay,  and  because  of  that,  they  weren't  allowed  to  make  that 
argument.  And  in  this  case  the  United  States  has  presented  evidence 
of  well  in  excess  of  $1000.00  in  different  means  and  modes. 

[Pause] 

MJ:  Assume  I  find  that  —  well,  assume  —  well,  just  assume  for 

sake  of  argument  that  there  is  no  prohibition  against  downloading 
email  addresses  to  a  personal  computer  that  has  been  proven,  does  the 
government  believe  there's  an  attempt? 

ATC [CPT  von  ELTEN] :  Yes,  ma'am,  absolutely. 

MJ:  Why? 

ATC [CPT  von  ELTEN]:  Because  in  this  case  where  PFC  Manning  has  a 
prolonged  and  demonstrated  pattern  of  compromising  information  to 
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WikiLeaks,  WikiLeaks  puts  out  a  Tweet  asking  for  the  email  addresses, 
and  shortly  thereafter  in  that  time  span,  PFC  Manning,  for  no 
apparent  reason  other  than  —  creates  a  tasker  saying  he  wants  to 
exfiltrate  the  military  addresses,  does  so,  takes  them  to  his 
personal  computer.  Furthermore,  in  the  exfiltration  tasker  PFC 
Manning  created  also  referred  —  if  I'm  not  mistaken  —  to  CIDNE  in 
that  document,  which  is  evidence  that  this  tasker  had  been  used 
before,  and  was  used  when  he  wanted  to  exfiltrate  and  compromise  the 
government  information. 

MJ:  This  exfiltration  tasker,  what  —  where  did  the  testimony 

come  from  or  what  exhibit  is  it  in? 

ATC [CPT  von  ELTEN] :  PE  122,  ma'am. 

ATC [CPT  MORROW]:  Testimony  of  Mr.  Johnson,  Your  Honor. 

ATC [CPT  von  ELTEN]:  Subject  to  your  questions,  ma'am. 

MJ:  No.  I  think  I  have  asked  them.  Thank  you. 

ATC [CPT  von  ELTEN]:  Thank  you. 

MJ:  Any  final  words,  Mr.  Coombs?  It's  your  motion. 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  Just  to  start  off  with  point 
of  a  clarification;  the  —  the  case  cited  by  the  government,  the 
Bottone  case,  I  believe,  when  the  Court  looks  at  that,  you'll  see 
it's  not  a  641  case. 

MJ:  But  isn't  it  referred  to  by  DiGilio  in  positive  terms? 

CDC [MR .  COOMBS]:  Yes,  but  as  far  as  being  641,  defense's 
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position  is  when  you  look  at  those  cases,  they  do,  in  fact,  require 
you  to  specifically  plead  the  property.  And  the  reason  why  that's 
important  obviously  is  for  the  notice,  but  the  Court  looks  also  at 
the  Zettl  case,  a  4th  Circuit  case,  and  it  also  kind  of  shows  the 
difference  between  how  you  plead  it,  and  how  you  value  it.  In  Zettl, 
you've  got  a  Navy  Defense  Appropriation  book  that  was  copied.  And 
they  proved  the  value  by  the  cost  price  of  the  photocopying,  the 
transportation  of  that  record,  and  the  actual  cost  of  the  record. 

But  when  you  --  when  you  look  at  what  was  not  allowed  in  that  case 
that's  important.  The  defense  wanted  to  get  access  to  the 
information.  They  wanted  to  be  able  to  bring  out  the  information 
within  the  record.  And  the  Court  said  - 

MJ:  To  bring  out  what  information  —  what  --  the  information  in 

the  book? 

CDC [MR .  COOMBS]:  Yes,  Your  Honor.  And  the  Court  said  the 
content  was  irrelevant  because  information  was  not  charged.  And  so 
in  that  case  the  defense  was  trying  in  discovery  to  get  access  to  the 
information  within  the  —  the  charge  copy  and  the  Court  denied  that 
reading  in  a  difference  between  copy  and  information. 

MJ:  Did  they  say  information  not  charged,  or  information  not 

used  to  determine  value? 

CDC [MR .  COOMBS]:  Not  charged,  ma'am.  So  —  and  that  would  be 
why  the  defense  would  say  that  there's  --  there  is  a  difference 
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between  record,  copy  record,  and  information  under  641.  And  the 
Zettl  case  highlights  that. 

MJ:  What's  the  defense's  position  with  respect  to  the 

government  position  that  there's  a  distinction  between  a  digital  copy 
and  hard  copy  —  that  a  digital  copy  isn't  really  a  copy? 

CDC [MR .  COOMBS]:  Well,  no,  I'd  agree  that  there's  a 

distinction  between  a  digital  copy  and  hard  copy.  And  —  and  all 
cases  bear  that  out,  that  the  copy  of  the  record  can  be  a  record  in 
and  of  itself  because  it's  a  copy,  and  that's  how  you  would  charge 
it;  you  —  a  photocopy  of  the  record  or  whatnot.  So  there  —  I  would 
disagree  that  there's  no  distinction  between  the  original  and  a  copy 
because  it's  somehow  digital.  There  is  a  difference.  And  --  and 
that  would  be  important  not  only  for  the  charging  and  valuing,  but 
also,  depending  upon  the  theory  you  go  under  for  either  the  stealing 
or  the  wrongful  appropriation  because  certainly  the  wrongful 
appropriation  there  is  difference. 

MJ:  Well,  there's  no  wrongful  appropriation  in  641. 

CDC [MR.  COOMBS]:  I'm  mean  —  excuse  me,  I'm  sorry,  conversion 

is  what  I  meant  to  say.  If  the  theory  was  conversion  —  let's  just 
take  the  stealing  out  of  it  —  but  the  government  just  charged  these 
records  under  a  theory  of  conversion,  there  --  there  would  be  no  way 
they  could  argue  there  is  no  difference  between  digital  and  a  copy 
because  we  would  all  agree  that  if  you  still  had  a  copy  of  it  there's 
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MJ:  I'm  not  following  this. 

CDC [MR .  COOMBS]:  Yeah.  So  if  you  had  —  so  if  the  government 
just  went  forward  on  a  theory  of  conversion  — 

MJ:  Yes. 

CDC [MR.  COOMBS]:  And  —  and  they  were  —  they're  trying  to 

prove  substantial  interference,  if  they  still  have  the  copy  of 
whatever  it  is  —  so  let’s  take  it  out  of  the  classified  realm  for  a 
moment,  and  let's  just  simply  say  whatever  copy  —  kind  of  like  the 
Zettl  case,  you've  got  the  Defense  Appropriation  book,  and  a  copy  of 
it,  and  you've  never  been  denied  the  original  possession  of  it,  and 
testimony,  like  in  this  case,  has  come  forward,  saying,  oh,  we  use 
the  book  same  way,  it  hasn't  changed  at  all  how  we  use  it,  there 
would  be  no  substantial  interference.  And  the  government  couldn't 
argue  that  there's  —  there's  no  difference  between  the  original  and 
additional  copy.  Now  the  copy  of  it,  when  you  actually  charge  the 
copy,  then  you  can  argue  a  substantial  interference  because  now  the 
case  law  does  bear  out  that  when  you  make  a  copy  of  a  government 
record,  that's  still  the  government's  property  even  though  it's  — 
you've  made  the  copy.  And  you  can  have  a  substantial  interference 
with  that,  but  that's  not  what  the  government  has  proven  here.  And 
that  kind  of  goes  back  to  —  at  least  when  it  comes  to  641  offenses, 
the  Supreme  Court  in  Morissette,  did  say.  I'll  quote  it  now,  "that 
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probably  every  stealing  is  a  conversion,  but  certainly  not  every 
known  conversion  is  a  stealing."  And  from  the  defense's  position 
then  at  a  minimum  the  government  would  have  to  prove  substantial  and 
serious  interference  regardless  of  how  they  go  forward. 

Then  just  with  —  on  the  GAL  for  a  moment.  The  —  the 
government  is  saying  —  I  guess  now  their  theory  is,  okay,  well,  you 
had  the  wrongfulness  when  you  put  it  on  your  personal  computer.  And 
the  Court's  tasked  them  to  find  something  on  that.  But  I  think  also 
just  the  common  sense  ways  and  ways  of  the  world  right  now  --  like  if 
you  go  on  your  personal  computer,  you  can  get  on  AKO  (Army  Knowledge 
On-line) ,  you  can  get  on  JAGCNET,  you  can  get  access  to  email 
addresses,  are  they  saying  that  you  can't  save  email  addresses  on 
your  personal  computer  when  you  can  access  that  information  on  your 
personal  computer?  And  —  and  so  that  kind  of  undercuts  that  —  that 
kind  of  argument  that  somehow  by  putting  it  on  the  personal  computer, 
that  that  was  wrongful. 

MJ:  Well,  if  you  can  access  something  on  your  personal 

computer,  like  AKO,  and  access  the  addresses,  why  does  that 
necessarily  preclude  a  regulatory  prohibition  on  downloading  those 
addresses  to  your  personal  computer? 

CDC [MR.  COOMBS]:  It  wouldn't.  And  so  if  you  had  that 

regulation  that  said,  hey,  you  can't  do  that;  it's  wrongful,  and 
there's  some  reason  why  —  perhaps  if  the  government  offered  that 
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evidence.  But  when  we  look  back  at  really  what  Rouillard  testified 
to,  what  the  Balonek  testified  to,  and  what's  in  the  Stip  of  Expected 
Testimony  for  Williamson,  they  all  have  the  same  statements;  there 
was  no  prohibition  on  the  downloading  and  saving  of  these  email 
addresses.  That's  the  government's  evidence.  And  so,  when  you  — 
when  you  see  what's  there  then  they  almost  kind  of  —  or  now  arguing 
some  sort  of  quasi-1030  argument  for  these  offenses  of  —  because  you 
--  you  did  have  the  ability  to  cut-and-paste .  I  mean,  I  think  what 
my  opposing  counsel  said  was,  you  could  cut-and-paste  but  that  would 
be  a  tedious  process.  But  if  you  actually  used,  you  know,  the  export 
function  that  he  figured  out  that  he  figured  out,  that  does  it  so 
much  faster.  So  apparently  speed  at  which  you  do  something,  in  the 
government's  eyes,  makes  it  wrongful  then  for  a  641  offense.  That 
shouldn't  work  for  the  1030  offense,  and  that  certainly  should  not 
work  for  the  641  offense. 

MJ:  Well,  we'll  have  to  see  what  the  government  presents  here. 

But  assume  —  I  guess,  in  order  to  exceed  authorized  access,  if  you 
will,  you're  on  your  personal  computer,  you're  going  to,  I  assume,  a 
NIPR  site  to  get  these  —  this  information. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  So  there  would  have  to  be  some  sort  of  evidence  that  the  — 
there's  some  sort  of  prohibition  on  executable  files  or  a  programs  or 
something  like  that  to  access  the  NIPR  site. 
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CDC [MR.  COOMBS]:  Right.  You  know  —  yeah,  so  if  you're 

carrying  that  1030  argument  and  applying  it  to  this,  then,  yes,  you 
have  to  have  something  to  say  that  when  you  access  this  —  again,  if 
you're  using  the  1030  logic,  that  by  doing  it  in  a  guicker  way  than  - 
-  than  you  could  do  otherwise  by  cut  and  paste,  that  that's  somehow 
now  wrongful.  But  there's  been  no  evidence  to  suggest  that.  And,  in 
fact,  the  evidence  to  the  contrary;  it's  just  —  you  can  do  it.  And 
the  only  person  who  testified  about  potential  wrongfulness  was  the 
person  who  said,  well,  it  depends  on  your  intent. 

MJ:  Well,  I  said  I  was  going  to  disregard  all  that,  too. 

CDC [MR.  COOMBS]:  Okay.  Well,  and  that  intent  goes  towards, 

again,  maybe  second  part  of  the  Court's  questions  was,  well,  could 
you  have  an  attempt?  And  —  and  then  it  would  be  important  then  to 
prove  a  specific  intent  to  commit  the  offense.  And  - 

MJ:  And  it  would,  and  a  substantial  step. 

CDC [MR.  COOMBS]:  Yeah,  and  the  overt  act  —  the  substantial 

step  to  accomplish  that.  And,  you  know,  the  government  points  to, 
okay,  he's  got  these  other  disclosures,  kind  of  the  spillover  effect 
to  try  to  prove  this  offense.  But  —  let's  run  with  that  spillover 
for  a  moment.  You've  got  these  other  disclosures,  and  we  can  show 
'em  —  because  we've  got  computer  forensics  to  show  'em  —  everything 
but  the  one  that  he's  saying  he  didn't  do,  and  that's  the  Farah 
video.  Of  course,  he's  saying  he  gave  them  videos,  but  at  a  later 
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date.  So  - 

MJ:  Well,  he's  not  saying  anything  for  purposes  of  this  - 

CDC [MR.  COOMBS]:  That  is  correct;  he's  not  saying  anything 

for  purposes  of  this  motion  or  for  this  case  actually  at  this  point. 
He  attempted  to  say  that  that  —  going  back  with  the  attempt.  But 
here  the  fact  that  you  have  the  forensics  to  show  that,  well,  here 
what  do  we  have  forensically?  We  show  that  he  put  the  information  on 
his  computer  and  then  deleted  it;  it's  in  the  unallocated  space,  and 
no  evidence  of  —  of  giving  it  to  anyone.  So  the  evidence  actually 
undercuts  any  argument  of  an  attempt. 

MJ:  The  forensics  for  the  other  charged  offenses  that  were 

conducted  prior,  were  they  in  the  deleted  or  unallocated  files? 

CDC [MR.  COOMBS]:  Urn,  not  —  I  don't  know  well  enough  to  tell 

you  that,  ma'am.  I'm  sorry. 

MJ:  That's  okay.  It's  not  your  burden. 

CDC [MR.  COOMBS]:  Yes,  ma'am.  I'll  run  with  that.  It's  not  my 
burden.  So  I  —  I  mean,  I  think  when  you  look  at  —  at  this  in 
totality,  the  government  has  all  the  issues  that  the  defense  argued 
in  its  motion  with  regards  to  the  GAL. 

MJ:  Thank  you. 

CDC [MR .  COOMBS]:  Than  you.  Your  Honor. 

MJ:  Government,  I'll  ask  you  the  same  question;  with  respect  to 

the  prior  charged  offenses  before  the  GAL,  do  the  forensics  indicate 
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whether  the  res ,  if  you  will,  was  in  the  deleted  or  unallocated 
files? 

ATC [CPT  von  ELTEN] :  Yes,  they  do.  Your  Honor.  Not  with  - 

MJ:  For  all  of  them? 

ATC [CPT  von  ELTEN]:  -  respect  to  the  CIDNE,  because  that 

happened  prior  to  the  wiping  of  the  computer,  but  with  respect  to 
the  Department  of  State  cables,  yes. 

TC [MAJ  FEIN]:  Your  Honor,  may  I  have  a  moment. 

MJ:  Yes. 

[Pause] 

ATC [CPT  MORROW]:  Ma'am  could  you  please  reask  the  question? 

MJ:  Yes.  The  defense's  position  is  basically  —  is  —  is  —  or 

one  of  the  arguments  has  been  that  the  forensics  show  that  the  GAL 
was  in  the  deleted  files,  I  believe,  on  the  Mac,  and  on  the  Peter 
Bigelow  account  in  the  supply  room.  Now  the  government's  position 
has  been  —  again,  we're  arguing  the  attempt  piece  now  —  that  the 
fact  that  they  are  in  the  deleted  —  the  fact  that  they're  in  the 
deleted  files  doesn't  make  any  difference  because  there's  been  a 
pattern  —  an  ongoing  pattern  of  disclosures.  So  I'm  asking  on  prior 
disclosures,  the  things  that  you  found,  the  Department  of  State 
cables,  SOUTCHCOM,  CIDNE,  were  they  found  in  deleted  and  unallocated 
files,  too? 

ATC [CPT  MORROW]:  Yes,  Your  Honor. 
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Army  and  Navy  use  DD  Form  491  for  records  of 
trial  in  general  and  special  court-martial  cases  in 
which  a  summarized  record  is  authorized. 
Inapplicable  words  of  the  printed  text  will  be 
deleted. 

COPIES  -  See  MCM,  1984,  RCM  1103(g).  The 
convening  authority  may  direct  the  preparation  of 
additional  copies. 

ARRANGEMENT  -  When  forwarded  to  the 
appropriate  Judge  Advocate  General  or  for  judge 
advocate  review  pursuant  to  Article  64(a),  the 
record  will  be  arranged  and  bound  with  allied 
papers  in  the  sequence  indicated  below.  Trial 
counsel  is  responsible  for  arranging  the  record  as 
indicated,  except  that  items  6,  7,  and  15e  will  be 
inserted  by  the  convening  or  reviewing  authority, 
as  appropriate,  and  items  10  and  14  will  be 
inserted  by  either  trial  counsel  or  the  convening  or 
reviewing  authority,  whichever  has  custody  of 
them. 

1 .  Front  cover  and  inside  front  cover  (chronology 
sheet)  of  DD  Form  490. 

2.  Judge  advocate's  review  pursuant  to  Article 
64(a),  if  any. 

3.  Request  of  accused  for  appellate  defense 
counsel,  or  waiver/withdrawal  of  appellate  rights, 
if  applicable. 

4.  Briefs  of  counsel  submitted  after  trial,  if  any 
(Article  38(c)). 

5.  DD  Form  494,  "Court-Martial  Data  Sheet." 

6.  Court-martial  orders  promulgating  the  result  of 
trial  as  to  each  accused,  in  10  copies  when  the 
record  is  verbatim  and  in  4  copies  when  it  is 
summarized. 

7.  When  required,  signed  recommendation  of 
staff  judge  advocate  or  legal  officer,  in  duplicate, 
together  with  all  clemency  papers,  including 
clemency  recommendations  by  court  members. 


8.  Matters  submitted  by  the  accused  pursuant  to 
Article  60  (MCM,  1984,  RCM  1105). 

9.  DD  Form  458,  "Charge  Sheet"  (unless  included 
at  the  point  of  arraignment  in  the  record). 

10.  Congressional  inquiries  and  replies,  if  any. 

11.  DD  Form  457,  "Investigating  Officer's  Report," 
pursuant  to  Article  32,  if  such  investigation  was 
conducted,  followed  by  any  other  papers  which 
accompanied  the  charges  when  referred  for  trial, 
unless  included  in  the  record  of  trial  proper. 

12.  Advice  of  staff  judge  advocate  or  legal  officer, 
when  prepared  pursuant  to  Article  34  or  otherwise. 

13.  Requests  by  counsel  and  action  of  the 
convening  authority  taken  thereon  (e.g.,  requests 
concerning  delay,  witnesses  and  depositions). 

14.  Records  of  former  trials. 

15.  Record  of  trial  in  the  following  order: 

a.  Errata  sheet,  if  any. 

b.  Index  sheet  with  reverse  side  containing 
receipt  of  accused  or  defense  counsel  for  copy  of 
record  or  certificate  in  lieu  of  receipt. 

c.  Record  of  proceedings  in  court,  including 
Article  39(a)  sessions,  if  any. 

d.  Authentication  sheet,  followed  by  certificate 
of  correction,  if  any. 

e.  Action  of  convening  authority  and,  if  appro¬ 
priate,  action  of  officer  exercising  general  court- 
martial  jurisdiction. 

f.  Exhibits  admitted  in  evidence. 

g.  Exhibits  not  received  in  evidence.  The  page 
of  the  record  of  trial  where  each  exhibit  was 
offered  and  rejected  will  be  noted  on  the  front  of 
each  exhibit. 

h.  Appellate  exhibits,  such  as  proposed  in¬ 
structions,  written  offers  of  proof  or  preliminary 
evidence  (real  or  documentary),  and  briefs  of 
counsel  submitted  at  trial. 
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